I0414 07:22:44.480837 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0414 07:22:44.480971 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0414 07:22:44.481228 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0414 07:22:44.487992 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0414 07:22:44.488685 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0414 07:22:44.488723 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0414 07:22:44.488796 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0414 07:22:44.492257 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0414 07:22:44.506341 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0414 07:22:44.511727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0414 07:22:44.515978 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0414 07:22:44.517480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0414 07:22:44.521142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0414 07:22:44.525595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0414 07:22:44.526966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0414 07:22:44.528949 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0414 07:22:44.530650 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0414 07:22:44.532313 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0414 07:22:44.533934 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0414 07:22:44.534014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0414 07:22:44.535829 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0414 07:22:44.541701 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0414 07:22:44.541939 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0414 07:22:44.544482 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0414 07:22:44.546821 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0414 07:22:44.549058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0414 07:22:44.551381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0414 07:22:44.555420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0414 07:22:44.559344 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0414 07:22:44.561822 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0414 07:22:44.561844 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0414 07:22:44.561855 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0414 07:22:44.562302 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0414 07:22:44.565327 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:22:44.567109 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:22:44.568235 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:22:44.569903 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:22:44.580416 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:22:44.596806 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:22:44.619655 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:22:44.632373 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:22:44.649067 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:22:44.657458 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:22:57.164821 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-14 07:22:57.164809794 +0000 UTC m=+12.714377511 I0414 07:22:57.910463 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:22:57.910525 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 07:22:57.910516793 +0000 UTC m=+13.460084510 I0414 07:22:57.911253 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 07:22:57.911247416 +0000 UTC m=+13.460815133 E0414 07:22:57.932002 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 07:22:57.932085 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-14 07:22:57.932077801 +0000 UTC m=+13.481645538 E0414 07:22:57.932109 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 07:22:57.932948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:22:57.933385 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 07:22:57.933364338 +0000 UTC m=+13.482932085 E0414 07:22:57.951552 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0414 07:22:57.951676 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 07:22:57.951763 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 07:22:57.951913 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0414 07:22:57.959475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:22:57.959628 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 07:22:57.95961591 +0000 UTC m=+13.509183657 I0414 07:22:57.963245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wns6l" condition "Approved" to 2026-04-14 07:22:57.963237458 +0000 UTC m=+13.512805165 I0414 07:22:57.969703 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 07:22:57.969696391 +0000 UTC m=+13.519264098 I0414 07:22:57.975536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wns6l" condition "Ready" to 2026-04-14 07:22:57.97552855 +0000 UTC m=+13.525096257 I0414 07:22:57.977698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:22:57.999744 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:22:57.999728593 +0000 UTC m=+13.549296310 I0414 07:22:58.021007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:23:02.952798 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:23:02.952780966 +0000 UTC m=+18.502348703 I0414 07:23:27.850752 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:23:27.850813 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 07:23:27.850806922 +0000 UTC m=+43.400374639 I0414 07:23:27.850845 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-14 07:23:27.850830823 +0000 UTC m=+43.400398560 I0414 07:23:27.865837 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-14 07:23:27.86582126 +0000 UTC m=+43.415388967 I0414 07:23:27.895199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:23:27.895284 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:23:27.895564 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 07:23:27.895553185 +0000 UTC m=+43.445120892 I0414 07:23:28.102573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8sbdc" condition "Approved" to 2026-04-14 07:23:28.102564162 +0000 UTC m=+43.652131859 I0414 07:23:28.159832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8sbdc" condition "Ready" to 2026-04-14 07:23:28.159822883 +0000 UTC m=+43.709390600 I0414 07:23:28.194833 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:23:28.194825562 +0000 UTC m=+43.744393269 I0414 07:23:28.226682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:29:53.672736 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-04-14 07:29:53.672699225 +0000 UTC m=+429.222266972 I0414 07:29:53.673416 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:29:53.673494 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-04-14 07:29:53.673484306 +0000 UTC m=+429.223052043 I0414 07:29:53.781652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:29:53.781823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:29:53.781933 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-04-14 07:29:53.781903067 +0000 UTC m=+429.331470814 I0414 07:29:54.332028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:29:54.509938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-chzf7" condition "Approved" to 2026-04-14 07:29:54.509925642 +0000 UTC m=+430.059493399 I0414 07:29:54.666125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-chzf7" condition "Ready" to 2026-04-14 07:29:54.666114754 +0000 UTC m=+430.215682471 I0414 07:29:54.862750 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:29:54.862733799 +0000 UTC m=+430.412301536 I0414 07:29:54.913453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:29:55.044701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:30:59.158590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:30:59.158682 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 07:30:59.158663829 +0000 UTC m=+494.708231546 I0414 07:30:59.158762 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 07:30:59.158747553 +0000 UTC m=+494.708315300 E0414 07:30:59.206674 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 07:30:59.206725 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-14 07:30:59.206713822 +0000 UTC m=+494.756281559 E0414 07:30:59.206797 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 07:30:59.211960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:30:59.212079 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 07:30:59.212065187 +0000 UTC m=+494.761632934 E0414 07:30:59.236232 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0414 07:30:59.236521 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 07:30:59.236580 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 07:30:59.236710 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0414 07:30:59.293587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:30:59.369477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nqdbg" condition "Approved" to 2026-04-14 07:30:59.36946388 +0000 UTC m=+494.919031587 I0414 07:30:59.384788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nqdbg" condition "Ready" to 2026-04-14 07:30:59.38477296 +0000 UTC m=+494.934340707 I0414 07:30:59.406648 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:30:59.406631934 +0000 UTC m=+494.956199641 I0414 07:30:59.421797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:30:59.423606 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:30:59.423590803 +0000 UTC m=+494.973158540 I0414 07:30:59.439437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:30:59.439832 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:30:59.439823658 +0000 UTC m=+494.989391385 I0414 07:31:04.236928 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:31:04.236911181 +0000 UTC m=+499.786478918 I0414 07:31:46.240732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:31:46.240757 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 07:31:46.24075273 +0000 UTC m=+541.790320437 I0414 07:31:46.240981 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 07:31:46.240976781 +0000 UTC m=+541.790544488 I0414 07:31:46.241165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:31:46.241181 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 07:31:46.241177992 +0000 UTC m=+541.790745689 I0414 07:31:46.241332 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 07:31:46.241328919 +0000 UTC m=+541.790896636 I0414 07:31:46.241494 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 07:31:46.241490778 +0000 UTC m=+541.791058485 I0414 07:31:46.241670 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:31:46.241685 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 07:31:46.241682738 +0000 UTC m=+541.791250445 I0414 07:31:46.323235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:46.323330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:46.332801 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 07:31:46.332788067 +0000 UTC m=+541.882355764 I0414 07:31:46.332950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:46.333430 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 07:31:46.33342643 +0000 UTC m=+541.882994137 I0414 07:31:46.333597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:31:46.333696 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 07:31:46.3336272 +0000 UTC m=+541.883194917 I0414 07:31:46.665357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:46.781037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:47.005623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2mc9r" condition "Approved" to 2026-04-14 07:31:47.005611172 +0000 UTC m=+542.555178889 I0414 07:31:47.006058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lbdvq" condition "Approved" to 2026-04-14 07:31:47.006048815 +0000 UTC m=+542.555616532 I0414 07:31:47.029417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2mc9r" condition "Ready" to 2026-04-14 07:31:47.029408549 +0000 UTC m=+542.578976266 I0414 07:31:47.030203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sxdcm" condition "Approved" to 2026-04-14 07:31:47.030190919 +0000 UTC m=+542.579758646 I0414 07:31:47.030406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lbdvq" condition "Ready" to 2026-04-14 07:31:47.03039829 +0000 UTC m=+542.579966007 I0414 07:31:47.075791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sxdcm" condition "Ready" to 2026-04-14 07:31:47.075782069 +0000 UTC m=+542.625349766 I0414 07:31:47.092644 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:31:47.092630297 +0000 UTC m=+542.642198014 I0414 07:31:47.130809 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:31:47.130789144 +0000 UTC m=+542.680356861 I0414 07:31:47.133975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:47.134198 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:31:47.134189099 +0000 UTC m=+542.683756806 I0414 07:31:47.152040 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:31:47.152029339 +0000 UTC m=+542.701597046 I0414 07:31:47.305785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:47.306160 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:31:47.306150733 +0000 UTC m=+542.855718440 I0414 07:31:47.460034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:47.460298 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:31:47.460293867 +0000 UTC m=+543.009861574 I0414 07:31:47.500664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:47.652970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:47.711724 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:31:47.711710576 +0000 UTC m=+543.261278293 I0414 07:31:47.853232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:48.003188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:48.051166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:55.757005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:31:55.757044 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls" condition "Issuing" to 2026-04-14 07:31:55.757034004 +0000 UTC m=+551.306601741 I0414 07:31:55.757317 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls" condition "Ready" to 2026-04-14 07:31:55.757295148 +0000 UTC m=+551.306862885 I0414 07:31:55.776702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:55.777002 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls" condition "Ready" to 2026-04-14 07:31:55.776988503 +0000 UTC m=+551.326556280 I0414 07:31:55.848697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:31:55.879617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lpm4h-fs2pv" condition "Approved" to 2026-04-14 07:31:55.879606704 +0000 UTC m=+551.429174421 I0414 07:31:55.900562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lpm4h-fs2pv" condition "Ready" to 2026-04-14 07:31:55.900552364 +0000 UTC m=+551.450120071 I0414 07:31:55.927613 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:31:55.927601532 +0000 UTC m=+551.477169249 I0414 07:31:55.950047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lpm4h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:32:12.665191 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 07:32:12.665174596 +0000 UTC m=+568.214742323 I0414 07:32:12.665242 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:32:12.665284 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 07:32:12.665273191 +0000 UTC m=+568.214840918 I0414 07:32:12.689553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:32:12.689708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:32:12.689737 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 07:32:12.689729748 +0000 UTC m=+568.239297465 I0414 07:32:13.140225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-55zxv" condition "Approved" to 2026-04-14 07:32:13.140214843 +0000 UTC m=+568.689782560 I0414 07:32:13.169257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-55zxv" condition "Ready" to 2026-04-14 07:32:13.169239403 +0000 UTC m=+568.718807140 I0414 07:32:13.195825 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:32:13.195814704 +0000 UTC m=+568.745382421 I0414 07:32:13.218012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:32:13.218562 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:32:13.218556151 +0000 UTC m=+568.768123858 I0414 07:32:13.235282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:32:13.235671 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:32:13.235663149 +0000 UTC m=+568.785230866 I0414 07:35:34.606133 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-14 07:35:34.606110581 +0000 UTC m=+770.155678288 I0414 07:35:34.606143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:35:34.606312 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 07:35:34.606304569 +0000 UTC m=+770.155872296 I0414 07:35:34.625685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:35:34.625855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:35:34.625914 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 07:35:34.625883379 +0000 UTC m=+770.175451096 I0414 07:35:34.872939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:35:34.886294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mpxg6" condition "Approved" to 2026-04-14 07:35:34.886282324 +0000 UTC m=+770.435850041 I0414 07:35:34.908915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mpxg6" condition "Ready" to 2026-04-14 07:35:34.90890632 +0000 UTC m=+770.458474027 I0414 07:35:34.947163 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:35:34.94715259 +0000 UTC m=+770.496720297 I0414 07:35:34.968384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:36:20.110959 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 07:36:20.110940092 +0000 UTC m=+815.660507799 I0414 07:36:20.111330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:36:20.111349 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 07:36:20.111346051 +0000 UTC m=+815.660913758 I0414 07:36:20.193928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:36:20.193997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:36:20.194017 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 07:36:20.194012296 +0000 UTC m=+815.743580003 I0414 07:36:20.487030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:36:20.495170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ql8lw" condition "Approved" to 2026-04-14 07:36:20.495159821 +0000 UTC m=+816.044727528 I0414 07:36:20.515560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ql8lw" condition "Ready" to 2026-04-14 07:36:20.51554803 +0000 UTC m=+816.065115747 I0414 07:36:20.544300 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:36:20.544279275 +0000 UTC m=+816.093846982 I0414 07:36:20.579414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:36:20.579752 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:36:20.579746425 +0000 UTC m=+816.129314132 I0414 07:36:20.599499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"