I0422 06:04:24.555540 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0422 06:04:24.555684 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0422 06:04:24.555762 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0422 06:04:24.559456 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0422 06:04:24.559877 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0422 06:04:24.559993 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0422 06:04:24.560043 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0422 06:04:24.563024 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0422 06:04:24.589461 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0422 06:04:24.593481 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0422 06:04:24.599943 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0422 06:04:24.603576 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0422 06:04:24.606079 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0422 06:04:24.608546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0422 06:04:24.611149 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0422 06:04:24.612983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0422 06:04:24.617777 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0422 06:04:24.619283 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0422 06:04:24.619304 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0422 06:04:24.619314 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0422 06:04:24.619375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0422 06:04:24.621006 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0422 06:04:24.621201 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0422 06:04:24.622880 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0422 06:04:24.624607 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0422 06:04:24.626098 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0422 06:04:24.626128 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0422 06:04:24.626279 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0422 06:04:24.628142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0422 06:04:24.629788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0422 06:04:24.631451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0422 06:04:24.633227 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0422 06:04:24.641977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0422 06:04:24.644931 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:04:24.645532 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:04:24.645592 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:04:24.645682 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:04:24.645745 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:04:24.645769 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:04:24.645849 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:04:24.646379 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:04:24.647143 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:04:24.732018 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:04:40.309285 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-22 06:04:40.309263948 +0000 UTC m=+15.788128248 I0422 06:04:40.991989 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:04:40.992059 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-22 06:04:40.992049935 +0000 UTC m=+16.470914235 I0422 06:04:40.993061 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 06:04:40.993051559 +0000 UTC m=+16.471915859 I0422 06:04:41.011132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:04:41.011208 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 06:04:41.01119971 +0000 UTC m=+16.490063970 E0422 06:04:41.012858 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 06:04:41.012952 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-22 06:04:41.0129431 +0000 UTC m=+16.491807390 E0422 06:04:41.012983 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 06:04:41.032022 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0422 06:04:41.032170 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 06:04:41.032279 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 06:04:41.032401 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0422 06:04:41.034694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:04:41.057457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b77zv" condition "Approved" to 2026-04-22 06:04:41.057430921 +0000 UTC m=+16.536295231 I0422 06:04:41.073006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b77zv" condition "Ready" to 2026-04-22 06:04:41.072994642 +0000 UTC m=+16.551858912 I0422 06:04:41.102446 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:04:41.102434899 +0000 UTC m=+16.581299159 I0422 06:04:41.169369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:04:41.294132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:04:46.033115 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:04:46.033098584 +0000 UTC m=+21.511962874 I0422 06:05:12.770886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:05:12.770947 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-22 06:05:12.770942154 +0000 UTC m=+48.249806424 I0422 06:05:12.770909 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-22 06:05:12.770897713 +0000 UTC m=+48.249761983 I0422 06:05:12.786964 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-22 06:05:12.786954708 +0000 UTC m=+48.265818968 I0422 06:05:12.807407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:05:12.807495 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-22 06:05:12.807487967 +0000 UTC m=+48.286352237 I0422 06:05:13.890761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:05:14.484141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8pkgf" condition "Approved" to 2026-04-22 06:05:14.484114141 +0000 UTC m=+49.962987841 I0422 06:05:14.982807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8pkgf" condition "Ready" to 2026-04-22 06:05:14.982793177 +0000 UTC m=+50.461657437 I0422 06:05:15.305845 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:05:15.305832483 +0000 UTC m=+50.784696773 I0422 06:05:15.341574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:11:02.622394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:11:02.622484 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-04-22 06:11:02.622473565 +0000 UTC m=+398.101337865 I0422 06:11:02.622443 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-22 06:11:02.622420454 +0000 UTC m=+398.101284744 I0422 06:11:02.689421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:11:02.689537 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-22 06:11:02.689527647 +0000 UTC m=+398.168391937 I0422 06:11:03.059345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:11:03.088643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-h9vtr" condition "Approved" to 2026-04-22 06:11:03.088631996 +0000 UTC m=+398.567496266 I0422 06:11:03.121793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-h9vtr" condition "Ready" to 2026-04-22 06:11:03.121779597 +0000 UTC m=+398.600643867 I0422 06:11:03.408374 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:11:03.408359155 +0000 UTC m=+398.887223445 I0422 06:11:03.549618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:11:03.550320 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:11:03.55028107 +0000 UTC m=+399.029145360 I0422 06:11:03.769775 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:11:03.769760766 +0000 UTC m=+399.248625066 I0422 06:11:03.779195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:11:03.782937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:05.083582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:12:05.083624 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-22 06:12:05.083613739 +0000 UTC m=+460.562478029 I0422 06:12:05.084000 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-22 06:12:05.083983364 +0000 UTC m=+460.562847674 E0422 06:12:05.158074 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 06:12:05.158142 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-22 06:12:05.158127576 +0000 UTC m=+460.636991886 E0422 06:12:05.158329 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 06:12:05.163640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:05.163805 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-22 06:12:05.163794424 +0000 UTC m=+460.642658724 E0422 06:12:05.339009 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0422 06:12:05.339116 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 06:12:05.339150 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 06:12:05.339193 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0422 06:12:05.402856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:05.655162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zphlm" condition "Approved" to 2026-04-22 06:12:05.655149022 +0000 UTC m=+461.134013312 I0422 06:12:05.823605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zphlm" condition "Ready" to 2026-04-22 06:12:05.823596515 +0000 UTC m=+461.302460775 I0422 06:12:05.961373 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:05.961355656 +0000 UTC m=+461.440219946 I0422 06:12:06.045187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:06.404561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:10.340844 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:10.340825372 +0000 UTC m=+465.819689662 I0422 06:13:00.633028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:13:00.633590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:13:00.633628 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-22 06:13:00.633619731 +0000 UTC m=+516.112484001 I0422 06:13:00.635268 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-22 06:13:00.635258262 +0000 UTC m=+516.114122542 I0422 06:13:00.635284 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-22 06:13:00.635274162 +0000 UTC m=+516.114138532 I0422 06:13:00.633070 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-22 06:13:00.633062384 +0000 UTC m=+516.111926654 I0422 06:13:00.635991 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-22 06:13:00.635983294 +0000 UTC m=+516.114847564 I0422 06:13:00.636126 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:13:00.638450 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-22 06:13:00.63844088 +0000 UTC m=+516.117305150 I0422 06:13:00.703833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:00.703878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:13:00.703948 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-22 06:13:00.703942541 +0000 UTC m=+516.182806801 I0422 06:13:00.706112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:00.706170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:13:00.706187 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-22 06:13:00.70618068 +0000 UTC m=+516.185044940 I0422 06:13:00.708456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:00.708502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:13:00.708518 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-22 06:13:00.708514172 +0000 UTC m=+516.187378432 I0422 06:13:01.022880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-d75dq" condition "Approved" to 2026-04-22 06:13:01.022870898 +0000 UTC m=+516.501735158 I0422 06:13:01.200791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gxmlw" condition "Approved" to 2026-04-22 06:13:01.200771833 +0000 UTC m=+516.679636133 I0422 06:13:01.202554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-d75dq" condition "Ready" to 2026-04-22 06:13:01.202542867 +0000 UTC m=+516.681407137 I0422 06:13:01.248513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gxmlw" condition "Ready" to 2026-04-22 06:13:01.248495357 +0000 UTC m=+516.727359657 I0422 06:13:01.309384 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:13:01.309372222 +0000 UTC m=+516.788236492 I0422 06:13:01.313020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-65d9h" condition "Approved" to 2026-04-22 06:13:01.313012945 +0000 UTC m=+516.791877215 I0422 06:13:01.359918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-65d9h" condition "Ready" to 2026-04-22 06:13:01.359899571 +0000 UTC m=+516.838763871 I0422 06:13:01.363965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:01.435009 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:13:01.434987454 +0000 UTC m=+516.913851754 I0422 06:13:01.497166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:01.497978 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:13:01.497967185 +0000 UTC m=+516.976831475 I0422 06:13:01.599890 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:13:01.599873359 +0000 UTC m=+517.078737629 I0422 06:13:01.968219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:01.981310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:01.981595 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:13:01.981588873 +0000 UTC m=+517.460453123 I0422 06:13:02.268165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:02.291402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:19.733763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:13:19.733796 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls" condition "Issuing" to 2026-04-22 06:13:19.733788765 +0000 UTC m=+535.212653035 I0422 06:13:19.734141 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls" condition "Ready" to 2026-04-22 06:13:19.734135286 +0000 UTC m=+535.212999556 I0422 06:13:19.767115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:19.767356 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls" condition "Ready" to 2026-04-22 06:13:19.767344619 +0000 UTC m=+535.246208919 I0422 06:13:20.105241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:20.157274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4zpqt-7lffx" condition "Approved" to 2026-04-22 06:13:20.157263366 +0000 UTC m=+535.636127636 I0422 06:13:20.189134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4zpqt-7lffx" condition "Ready" to 2026-04-22 06:13:20.189125589 +0000 UTC m=+535.667989849 I0422 06:13:20.230471 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:13:20.230454381 +0000 UTC m=+535.709318651 I0422 06:13:20.251891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:20.252225 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:13:20.252219643 +0000 UTC m=+535.731083903 I0422 06:13:20.569841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zpqt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:14:22.097790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:14:22.097827 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-22 06:14:22.097809737 +0000 UTC m=+597.576674007 I0422 06:14:22.097838 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-22 06:14:22.097823717 +0000 UTC m=+597.576688017 I0422 06:14:22.122028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:14:22.122127 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-22 06:14:22.122121901 +0000 UTC m=+597.600986171 I0422 06:14:22.480173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:14:22.518630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-928jk" condition "Approved" to 2026-04-22 06:14:22.518614977 +0000 UTC m=+597.997479237 I0422 06:14:22.541932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-928jk" condition "Ready" to 2026-04-22 06:14:22.541919614 +0000 UTC m=+598.020783874 I0422 06:14:22.606250 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:14:22.606235957 +0000 UTC m=+598.085100227 I0422 06:14:22.657174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:14:22.657446 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:14:22.657440312 +0000 UTC m=+598.136304572 I0422 06:14:22.668822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:14:22.705692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:17:29.434150 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:17:29.434206 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-22 06:17:29.434199712 +0000 UTC m=+784.913063972 I0422 06:17:29.434541 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-22 06:17:29.434535408 +0000 UTC m=+784.913399658 I0422 06:17:29.450914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:17:29.451025 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-22 06:17:29.451017749 +0000 UTC m=+784.929882009 I0422 06:17:29.560713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:17:29.585547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5x9w6" condition "Approved" to 2026-04-22 06:17:29.585537666 +0000 UTC m=+785.064401926 I0422 06:17:29.612678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5x9w6" condition "Ready" to 2026-04-22 06:17:29.612665477 +0000 UTC m=+785.091529757 I0422 06:17:29.637022 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:17:29.63700954 +0000 UTC m=+785.115873800 I0422 06:17:29.654242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:17:29.709883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:18:14.602803 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:18:14.602831 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-22 06:18:14.602823835 +0000 UTC m=+830.081688095 I0422 06:18:14.603059 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-22 06:18:14.60305529 +0000 UTC m=+830.081919550 I0422 06:18:14.761904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:18:14.762017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:18:14.762049 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-22 06:18:14.762038463 +0000 UTC m=+830.240902743 I0422 06:18:15.065327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-p2c99" condition "Approved" to 2026-04-22 06:18:15.065312949 +0000 UTC m=+830.544177249 I0422 06:18:15.086249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-p2c99" condition "Ready" to 2026-04-22 06:18:15.086223842 +0000 UTC m=+830.565088152 I0422 06:18:15.116536 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:18:15.11651778 +0000 UTC m=+830.595382070 I0422 06:18:15.138388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:18:15.138768 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:18:15.13875755 +0000 UTC m=+830.617621820 I0422 06:18:15.156871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"