I0415 18:40:49.133867       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0415 18:40:49.134003       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0415 18:40:49.134101       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0415 18:40:49.143551       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0415 18:40:49.144146       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0415 18:40:49.144199       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0415 18:40:49.144149       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0415 18:40:49.147726       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0415 18:40:49.162318       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0415 18:40:49.165579       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0415 18:40:49.168153       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0415 18:40:49.172778       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0415 18:40:49.177463       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0415 18:40:49.177499       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0415 18:40:49.180412       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0415 18:40:49.180563       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0415 18:40:49.183253       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0415 18:40:49.186106       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0415 18:40:49.186127       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0415 18:40:49.186202       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0415 18:40:49.189476       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0415 18:40:49.191231       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0415 18:40:49.193988       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0415 18:40:49.198201       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0415 18:40:49.200707       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0415 18:40:49.202905       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0415 18:40:49.203082       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0415 18:40:49.205373       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0415 18:40:49.207187       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0415 18:40:49.209060       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0415 18:40:49.210615       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0415 18:40:49.210792       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0415 18:40:49.213004       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0415 18:40:49.215109       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0415 18:40:49.218820       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0415 18:40:49.219572       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0415 18:40:49.220033       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0415 18:40:49.236717       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0415 18:40:49.252845       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0415 18:40:49.266781       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0415 18:40:49.282778       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0415 18:40:49.305322       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0415 18:40:49.313169       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0415 18:41:09.700222       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-15 18:41:09.700205651 +0000 UTC m=+20.597140975
I0415 18:41:10.522592       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-15 18:41:10.522545653 +0000 UTC m=+21.419480987
I0415 18:41:10.524446       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:41:10.524503       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-15 18:41:10.524496271 +0000 UTC m=+21.421431595
E0415 18:41:10.541214       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0415 18:41:10.541295       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-15 18:41:10.541287623 +0000 UTC m=+21.438222927
E0415 18:41:10.543178       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0415 18:41:10.545836       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:41:10.545981       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:41:10.546008       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-15 18:41:10.546001947 +0000 UTC m=+21.442937251
E0415 18:41:10.556723       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0415 18:41:10.556863       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0415 18:41:10.556916       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0415 18:41:10.556982       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0415 18:41:10.586039       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:41:10.593620       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xrsdj" condition "Approved" to 2026-04-15 18:41:10.593607076 +0000 UTC m=+21.490542380
I0415 18:41:10.606270       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xrsdj" condition "Ready" to 2026-04-15 18:41:10.606246311 +0000 UTC m=+21.503181685
I0415 18:41:10.636446       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:41:10.63643215 +0000 UTC m=+21.533367454
I0415 18:41:10.653622       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:41:10.695928       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:41:15.557301       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:41:15.5572826 +0000 UTC m=+26.454217924
I0415 18:41:37.860479       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:41:37.860530       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-15 18:41:37.860517505 +0000 UTC m=+48.757452809
I0415 18:41:37.860745       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-15 18:41:37.860726751 +0000 UTC m=+48.757662045
I0415 18:41:37.872668       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-15 18:41:37.872653379 +0000 UTC m=+48.769588673
I0415 18:41:37.908371       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:41:37.908519       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:41:37.908578       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-15 18:41:37.908546234 +0000 UTC m=+48.805481528
I0415 18:41:38.069808       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:41:38.085363       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wmhlq" condition "Approved" to 2026-04-15 18:41:38.085346707 +0000 UTC m=+48.982282031
I0415 18:41:38.115552       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wmhlq" condition "Ready" to 2026-04-15 18:41:38.11553809 +0000 UTC m=+49.012473404
I0415 18:41:38.149681       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:41:38.149667015 +0000 UTC m=+49.046602319
I0415 18:41:38.173619       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:41:38.174195       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:41:38.174186142 +0000 UTC m=+49.071121456
I0415 18:41:38.195817       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:41:38.196082       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:41:38.196072743 +0000 UTC m=+49.093008047
I0415 18:45:47.060537       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:45:47.061071       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready" to 2026-04-15 18:45:47.061058093 +0000 UTC m=+297.957993467
I0415 18:45:47.060580       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Issuing" to 2026-04-15 18:45:47.060569787 +0000 UTC m=+297.957505121
I0415 18:45:47.080077       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:45:47.080136       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready" to 2026-04-15 18:45:47.080128058 +0000 UTC m=+297.977063352
I0415 18:45:47.199182       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:45:47.228920       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-74.nip.io-tls-r9xwf" condition "Approved" to 2026-04-15 18:45:47.22890911 +0000 UTC m=+298.125844404
I0415 18:45:47.252577       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-74.nip.io-tls-r9xwf" condition "Ready" to 2026-04-15 18:45:47.25256409 +0000 UTC m=+298.149499394
I0415 18:45:47.271907       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:45:47.271898903 +0000 UTC m=+298.168834217
I0415 18:45:47.288139       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:45:47.326220       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:46:51.605565       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:46:51.605705       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-15 18:46:51.605675996 +0000 UTC m=+362.502611320
I0415 18:46:51.605620       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-15 18:46:51.605607894 +0000 UTC m=+362.502543218
E0415 18:46:51.620781       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0415 18:46:51.620823       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-15 18:46:51.620813843 +0000 UTC m=+362.517749147
E0415 18:46:51.620891       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0415 18:46:51.623162       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:46:51.623250       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:46:51.623300       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-15 18:46:51.623262579 +0000 UTC m=+362.520197883
E0415 18:46:51.632433       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0415 18:46:51.632874       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0415 18:46:51.632912       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0415 18:46:51.632979       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0415 18:46:51.661987       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:46:51.667330       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jmnkv" condition "Approved" to 2026-04-15 18:46:51.667314864 +0000 UTC m=+362.564250168
I0415 18:46:51.678692       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jmnkv" condition "Ready" to 2026-04-15 18:46:51.678681139 +0000 UTC m=+362.575616443
I0415 18:46:51.700297       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:46:51.700285151 +0000 UTC m=+362.597220445
I0415 18:46:51.715782       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:46:56.633931       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:46:56.633910152 +0000 UTC m=+367.530845486
I0415 18:47:36.535317       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:47:36.535827       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-15 18:47:36.535817133 +0000 UTC m=+407.432752427
I0415 18:47:36.535350       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-15 18:47:36.53534415 +0000 UTC m=+407.432279444
I0415 18:47:36.545794       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:47:36.545876       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-15 18:47:36.545868211 +0000 UTC m=+407.442803505
I0415 18:47:36.546160       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-15 18:47:36.546150487 +0000 UTC m=+407.443085781
I0415 18:47:36.562249       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:47:36.562331       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-15 18:47:36.562321897 +0000 UTC m=+407.459257201
I0415 18:47:36.562685       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-15 18:47:36.562675645 +0000 UTC m=+407.459610939
I0415 18:47:36.591047       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:36.591174       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:36.591349       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:47:36.591404       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-15 18:47:36.591397925 +0000 UTC m=+407.488333219
I0415 18:47:36.591674       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:47:36.591693       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-15 18:47:36.591690363 +0000 UTC m=+407.488625657
I0415 18:47:36.600169       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:36.600414       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:47:36.600473       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-15 18:47:36.600453749 +0000 UTC m=+407.497389033
I0415 18:47:36.785535       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jqq4g" condition "Approved" to 2026-04-15 18:47:36.78552751 +0000 UTC m=+407.682462804
I0415 18:47:36.807077       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:36.831694       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jqq4g" condition "Ready" to 2026-04-15 18:47:36.831685659 +0000 UTC m=+407.728620953
I0415 18:47:36.867439       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9zszr" condition "Approved" to 2026-04-15 18:47:36.867419772 +0000 UTC m=+407.764355076
I0415 18:47:36.885000       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9zszr" condition "Ready" to 2026-04-15 18:47:36.884989376 +0000 UTC m=+407.781924670
I0415 18:47:36.900934       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:47:36.900916929 +0000 UTC m=+407.797852233
I0415 18:47:36.909011       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jxmvc" condition "Approved" to 2026-04-15 18:47:36.909000039 +0000 UTC m=+407.805935343
I0415 18:47:36.952356       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:36.952723       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:47:36.952717638 +0000 UTC m=+407.849652932
I0415 18:47:37.077530       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jxmvc" condition "Ready" to 2026-04-15 18:47:37.077515567 +0000 UTC m=+407.974450891
I0415 18:47:37.120550       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:47:37.120534118 +0000 UTC m=+408.017469422
I0415 18:47:37.575489       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:37.575767       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:47:37.575761073 +0000 UTC m=+408.472696367
I0415 18:47:37.616334       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:37.673340       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:37.722956       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:47:37.722945391 +0000 UTC m=+408.619880685
I0415 18:47:38.018099       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:38.067938       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:38.418422       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:51.350482       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:47:51.350538       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls" condition "Issuing" to 2026-04-15 18:47:51.350526242 +0000 UTC m=+422.247461576
I0415 18:47:51.350555       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls" condition "Ready" to 2026-04-15 18:47:51.350532382 +0000 UTC m=+422.247467676
I0415 18:47:51.371921       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:51.372020       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls" condition "Ready" to 2026-04-15 18:47:51.37200942 +0000 UTC m=+422.268944744
I0415 18:47:51.950368       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:52.065800       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m8w4j-hvttv" condition "Approved" to 2026-04-15 18:47:52.065783351 +0000 UTC m=+422.962718665
I0415 18:47:52.275499       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m8w4j-hvttv" condition "Ready" to 2026-04-15 18:47:52.275481981 +0000 UTC m=+423.172417285
I0415 18:47:52.402031       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:47:52.402018488 +0000 UTC m=+423.298953792
I0415 18:47:52.469315       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m8w4j-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:57.774859       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:47:57.774930       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-15 18:47:57.77489695 +0000 UTC m=+428.671832274
I0415 18:47:57.775001       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-15 18:47:57.774977292 +0000 UTC m=+428.671912596
I0415 18:47:57.839110       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:57.839173       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:47:57.839189       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-15 18:47:57.839182967 +0000 UTC m=+428.736118261
I0415 18:47:58.035462       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sfmxk" condition "Approved" to 2026-04-15 18:47:58.035450718 +0000 UTC m=+428.932386012
I0415 18:47:58.064685       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sfmxk" condition "Ready" to 2026-04-15 18:47:58.064672566 +0000 UTC m=+428.961607880
I0415 18:47:58.098607       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:47:58.098593736 +0000 UTC m=+428.995529050
I0415 18:47:58.128849       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:58.129365       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:47:58.12935987 +0000 UTC m=+429.026295164
I0415 18:47:58.131287       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:58.150502       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:47:58.150944       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:47:58.150933895 +0000 UTC m=+429.047869199
I0415 18:51:09.474601       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-15 18:51:09.474565323 +0000 UTC m=+620.371500627
I0415 18:51:09.474923       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:51:09.475002       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-15 18:51:09.474993732 +0000 UTC m=+620.371929036
I0415 18:51:09.496675       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:51:09.496820       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-15 18:51:09.496809379 +0000 UTC m=+620.393744673
I0415 18:51:09.569934       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:51:09.604044       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8bvzt" condition "Approved" to 2026-04-15 18:51:09.604030433 +0000 UTC m=+620.500965727
I0415 18:51:09.623151       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8bvzt" condition "Ready" to 2026-04-15 18:51:09.623136994 +0000 UTC m=+620.520072288
I0415 18:51:09.655697       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:51:09.65567609 +0000 UTC m=+620.552611384
I0415 18:51:09.674423       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:51:09.674970       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:51:09.674959794 +0000 UTC m=+620.571895098
I0415 18:51:09.697890       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:51:53.767211       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:51:53.767251       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-15 18:51:53.767234569 +0000 UTC m=+664.664169863
I0415 18:51:53.767251       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-15 18:51:53.767242319 +0000 UTC m=+664.664177643
I0415 18:51:53.784249       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:51:53.784573       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0415 18:51:53.784678       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-15 18:51:53.7846678 +0000 UTC m=+664.681603124
I0415 18:51:53.992895       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-c49ht" condition "Approved" to 2026-04-15 18:51:53.992878143 +0000 UTC m=+664.889813437
I0415 18:51:54.019290       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-c49ht" condition "Ready" to 2026-04-15 18:51:54.019275375 +0000 UTC m=+664.916210669
I0415 18:51:54.055445       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 18:51:54.055431785 +0000 UTC m=+664.952367069
I0415 18:51:54.076099       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0415 18:51:54.137216       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"