I0412 08:49:35.794363 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0412 08:49:35.794569 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0412 08:49:35.794659 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0412 08:49:35.799188 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0412 08:49:35.799597 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0412 08:49:35.799757 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0412 08:49:35.799776 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0412 08:49:35.802043 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0412 08:49:35.822914 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0412 08:49:35.833652 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0412 08:49:35.838134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0412 08:49:35.840391 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0412 08:49:35.842658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0412 08:49:35.845196 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0412 08:49:35.847441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0412 08:49:35.849099 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0412 08:49:35.855536 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0412 08:49:35.855613 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0412 08:49:35.859774 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0412 08:49:35.861597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0412 08:49:35.863453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0412 08:49:35.865306 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0412 08:49:35.865326 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0412 08:49:35.865341 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0412 08:49:35.865376 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0412 08:49:35.867585 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0412 08:49:35.867860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0412 08:49:35.869966 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0412 08:49:35.870543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0412 08:49:35.871932 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0412 08:49:35.875740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0412 08:49:35.879029 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0412 08:49:35.882058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0412 08:49:35.885322 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:49:35.885372 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:49:35.885330 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:49:35.885917 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:49:35.886118 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:49:35.886344 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:49:35.886535 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:49:35.886421 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:49:35.887353 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:49:35.961887 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:49:47.030348 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-12 08:49:47.030332944 +0000 UTC m=+11.269104662 I0412 08:49:47.778269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:49:47.778315 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-12 08:49:47.778308715 +0000 UTC m=+12.017080403 I0412 08:49:47.778671 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 08:49:47.778666302 +0000 UTC m=+12.017437990 E0412 08:49:47.792601 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 08:49:47.792663 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-12 08:49:47.792658337 +0000 UTC m=+12.031430015 E0412 08:49:47.792680 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 08:49:47.794457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:49:47.794616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:49:47.794647 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-12 08:49:47.794638536 +0000 UTC m=+12.033410244 E0412 08:49:47.801219 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0412 08:49:47.801320 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 08:49:47.801401 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 08:49:47.801777 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0412 08:49:47.826057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:49:47.828612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kkfxt" condition "Approved" to 2026-04-12 08:49:47.828604558 +0000 UTC m=+12.067376246 I0412 08:49:47.839523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kkfxt" condition "Ready" to 2026-04-12 08:49:47.839515189 +0000 UTC m=+12.078286877 I0412 08:49:47.866706 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:49:47.866682042 +0000 UTC m=+12.105453720 I0412 08:49:47.882387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:49:47.882962 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:49:47.882951573 +0000 UTC m=+12.121723281 I0412 08:49:47.900217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:49:52.801642 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:49:52.80162357 +0000 UTC m=+17.040395288 I0412 08:50:15.009906 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:50:15.009996 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 08:50:15.009988718 +0000 UTC m=+39.248760406 I0412 08:50:15.010242 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-12 08:50:15.010226133 +0000 UTC m=+39.248997811 I0412 08:50:15.024330 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-12 08:50:15.024316217 +0000 UTC m=+39.263087915 I0412 08:50:15.038196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:50:15.038330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:50:15.038415 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 08:50:15.03840595 +0000 UTC m=+39.277177628 I0412 08:50:15.359735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:50:15.367382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2tdsb" condition "Approved" to 2026-04-12 08:50:15.367347142 +0000 UTC m=+39.606118860 I0412 08:50:15.400983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2tdsb" condition "Ready" to 2026-04-12 08:50:15.400967337 +0000 UTC m=+39.639739055 I0412 08:50:15.439501 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:50:15.439487872 +0000 UTC m=+39.678259550 I0412 08:50:15.464945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:54:29.354769 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Ready" to 2026-04-12 08:54:29.354729819 +0000 UTC m=+293.593501527 I0412 08:54:29.356045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-62.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:54:29.356671 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Issuing" to 2026-04-12 08:54:29.356662746 +0000 UTC m=+293.595434454 I0412 08:54:29.371605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:54:29.371648 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-62.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:54:29.371664 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Issuing" to 2026-04-12 08:54:29.371659603 +0000 UTC m=+293.610431291 I0412 08:54:29.842917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:54:29.850288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-62.nip.io-tls-wdn5h" condition "Approved" to 2026-04-12 08:54:29.850278668 +0000 UTC m=+294.089050356 I0412 08:54:29.879110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-62.nip.io-tls-wdn5h" condition "Ready" to 2026-04-12 08:54:29.879096567 +0000 UTC m=+294.117868275 I0412 08:54:29.901962 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:54:29.901950838 +0000 UTC m=+294.140722546 I0412 08:54:29.919044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:54:29.919332 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:54:29.919325391 +0000 UTC m=+294.158097079 I0412 08:54:29.922466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:54:29.941030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:55:32.892843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:55:32.892872 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-12 08:55:32.892855951 +0000 UTC m=+357.131627629 I0412 08:55:32.892888 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 08:55:32.892876741 +0000 UTC m=+357.131648449 I0412 08:55:32.906504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:55:32.906736 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:55:32.906763 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 08:55:32.906757335 +0000 UTC m=+357.145529003 E0412 08:55:32.907341 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 08:55:32.907422 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-12 08:55:32.907407787 +0000 UTC m=+357.146179505 E0412 08:55:32.907520 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 08:55:32.919222 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0412 08:55:32.919313 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 08:55:32.919351 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 08:55:32.919394 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0412 08:55:32.957425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qz5zr" condition "Approved" to 2026-04-12 08:55:32.957411583 +0000 UTC m=+357.196183291 I0412 08:55:32.971894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qz5zr" condition "Ready" to 2026-04-12 08:55:32.971859508 +0000 UTC m=+357.210631196 I0412 08:55:32.993574 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:55:32.993560106 +0000 UTC m=+357.232331794 I0412 08:55:33.011651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:55:33.017676 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:55:33.017670121 +0000 UTC m=+357.256441799 I0412 08:55:33.053655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:55:33.069730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:55:37.920006 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:55:37.919993887 +0000 UTC m=+362.158765595 I0412 08:56:16.975292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:56:16.975323 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 08:56:16.97531641 +0000 UTC m=+401.214088088 I0412 08:56:16.977574 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-12 08:56:16.977559724 +0000 UTC m=+401.216331402 I0412 08:56:16.977988 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 08:56:16.977984532 +0000 UTC m=+401.216756210 I0412 08:56:16.978110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:56:16.978126 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-12 08:56:16.978123815 +0000 UTC m=+401.216895493 I0412 08:56:16.982105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:56:16.982110 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 08:56:16.982100093 +0000 UTC m=+401.220871771 I0412 08:56:16.982141 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 08:56:16.982134983 +0000 UTC m=+401.220906661 I0412 08:56:17.026141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:17.026400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:56:17.026422 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-12 08:56:17.026416536 +0000 UTC m=+401.265188224 I0412 08:56:17.028135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:17.028173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:56:17.028187 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 08:56:17.028183282 +0000 UTC m=+401.266954970 I0412 08:56:17.034354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:17.034391 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 08:56:17.034387413 +0000 UTC m=+401.273159091 I0412 08:56:17.141999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:17.173474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cmgmq" condition "Approved" to 2026-04-12 08:56:17.173457675 +0000 UTC m=+401.412229393 I0412 08:56:17.191343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cmgmq" condition "Ready" to 2026-04-12 08:56:17.191329626 +0000 UTC m=+401.430101314 I0412 08:56:17.231171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-knwn7" condition "Approved" to 2026-04-12 08:56:17.231161461 +0000 UTC m=+401.469933149 I0412 08:56:17.245785 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:56:17.245769479 +0000 UTC m=+401.484541177 I0412 08:56:17.258295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-knwn7" condition "Ready" to 2026-04-12 08:56:17.258284426 +0000 UTC m=+401.497056094 I0412 08:56:17.283620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:17.283874 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:56:17.28386834 +0000 UTC m=+401.522640018 I0412 08:56:17.308941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:17.416552 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:56:17.416540414 +0000 UTC m=+401.655312092 I0412 08:56:17.459004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:17.519619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-crw5p" condition "Approved" to 2026-04-12 08:56:17.519605055 +0000 UTC m=+401.758376733 I0412 08:56:17.611444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0412 08:56:17.704410 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-vprgr\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0412 08:56:17.918186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-crw5p" condition "Ready" to 2026-04-12 08:56:17.918173759 +0000 UTC m=+402.156945447 I0412 08:56:18.360623 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:56:18.360606438 +0000 UTC m=+402.599378126 I0412 08:56:18.560089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:18.560648 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:56:18.56063586 +0000 UTC m=+402.799407558 I0412 08:56:18.858227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:18.907996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:23.775671 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-85xpz-tls" condition "Ready" to 2026-04-12 08:56:23.775661654 +0000 UTC m=+408.014433322 I0412 08:56:23.775987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-85xpz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:56:23.776081 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-85xpz-tls" condition "Issuing" to 2026-04-12 08:56:23.776037451 +0000 UTC m=+408.014809159 I0412 08:56:23.796307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-85xpz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-85xpz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:23.796375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-85xpz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:56:23.796394 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-85xpz-tls" condition "Issuing" to 2026-04-12 08:56:23.796387333 +0000 UTC m=+408.035159031 I0412 08:56:24.111446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-85xpz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-85xpz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:24.121536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-85xpz-f98dx" condition "Approved" to 2026-04-12 08:56:24.12152326 +0000 UTC m=+408.360294948 I0412 08:56:24.148050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-85xpz-f98dx" condition "Ready" to 2026-04-12 08:56:24.148040012 +0000 UTC m=+408.386811690 I0412 08:56:24.174748 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-85xpz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:56:24.174730808 +0000 UTC m=+408.413502536 I0412 08:56:24.191751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-85xpz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-85xpz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:37.403349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:56:37.403384 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 08:56:37.403376545 +0000 UTC m=+421.642148233 I0412 08:56:37.403811 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-12 08:56:37.403790173 +0000 UTC m=+421.642561891 I0412 08:56:37.446024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:37.446118 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:56:37.446142 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 08:56:37.446132757 +0000 UTC m=+421.684904465 I0412 08:56:37.768009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fnrtw" condition "Approved" to 2026-04-12 08:56:37.767993809 +0000 UTC m=+422.006765497 I0412 08:56:37.788459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fnrtw" condition "Ready" to 2026-04-12 08:56:37.788444622 +0000 UTC m=+422.027216310 I0412 08:56:37.819342 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:56:37.81932155 +0000 UTC m=+422.058093258 I0412 08:56:37.836073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:37.836266 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:56:37.836261124 +0000 UTC m=+422.075032802 I0412 08:56:37.854373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:59:49.850372 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-12 08:59:49.850327003 +0000 UTC m=+614.089098711 I0412 08:59:49.851356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:59:49.851458 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-12 08:59:49.851382804 +0000 UTC m=+614.090154512 I0412 08:59:49.868238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:59:49.868322 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-12 08:59:49.868313517 +0000 UTC m=+614.107085205 I0412 08:59:50.134782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:59:50.182722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5sn87" condition "Approved" to 2026-04-12 08:59:50.182699537 +0000 UTC m=+614.421471245 I0412 08:59:50.206110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5sn87" condition "Ready" to 2026-04-12 08:59:50.206101218 +0000 UTC m=+614.444872906 I0412 08:59:50.244514 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:59:50.244497323 +0000 UTC m=+614.483269041 I0412 08:59:50.266281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:59:50.321208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:00:33.059856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:00:33.059891 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-12 09:00:33.059883082 +0000 UTC m=+657.298654760 I0412 09:00:33.060206 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-12 09:00:33.060201318 +0000 UTC m=+657.298972996 I0412 09:00:33.083700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:00:33.083980 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-12 09:00:33.083967806 +0000 UTC m=+657.322739514 I0412 09:00:33.196232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:00:33.230599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4v87b" condition "Approved" to 2026-04-12 09:00:33.230584883 +0000 UTC m=+657.469356571 I0412 09:00:33.257156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4v87b" condition "Ready" to 2026-04-12 09:00:33.257147565 +0000 UTC m=+657.495919243 I0412 09:00:33.296560 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:00:33.296543752 +0000 UTC m=+657.535315440 I0412 09:00:33.322871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"