I0419 13:25:41.360985 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0419 13:25:41.361127 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0419 13:25:41.361270 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0419 13:25:41.369132 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0419 13:25:41.369809 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0419 13:25:41.369864 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0419 13:25:41.369975 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0419 13:25:41.374220 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0419 13:25:41.390420 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0419 13:25:41.390653 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0419 13:25:41.394620 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0419 13:25:41.397952 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0419 13:25:41.398086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0419 13:25:41.403964 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0419 13:25:41.406208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0419 13:25:41.408076 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0419 13:25:41.409884 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0419 13:25:41.411843 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0419 13:25:41.411872 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0419 13:25:41.411973 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0419 13:25:41.413724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0419 13:25:41.416172 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0419 13:25:41.420748 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0419 13:25:41.425417 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0419 13:25:41.429472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0419 13:25:41.431924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0419 13:25:41.433985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0419 13:25:41.435804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0419 13:25:41.440363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0419 13:25:41.444330 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0419 13:25:41.447109 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0419 13:25:41.447131 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0419 13:25:41.447143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0419 13:25:41.453429 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:41.453651 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:41.456304 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:41.456598 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:41.469749 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:41.491325 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:41.511238 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:41.525298 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:41.550159 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:41.556796 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:53.958353 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-19 13:25:53.957480997 +0000 UTC m=+12.633985121 I0419 13:25:54.842415 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-19 13:25:54.84239503 +0000 UTC m=+13.518899164 I0419 13:25:54.842979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:25:54.843223 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-19 13:25:54.843200517 +0000 UTC m=+13.519704631 E0419 13:25:54.859699 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:25:54.859820 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-19 13:25:54.859812808 +0000 UTC m=+13.536316902 E0419 13:25:54.859880 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:25:54.862250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:25:54.862318 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-19 13:25:54.862314711 +0000 UTC m=+13.538818795 E0419 13:25:54.876423 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0419 13:25:54.876633 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:25:54.876956 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:25:54.877120 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0419 13:25:54.880574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:25:54.904756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vk4lm" condition "Approved" to 2026-04-19 13:25:54.904740269 +0000 UTC m=+13.581244373 I0419 13:25:54.919907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vk4lm" condition "Ready" to 2026-04-19 13:25:54.91989256 +0000 UTC m=+13.596396664 I0419 13:25:54.943356 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:25:54.943341746 +0000 UTC m=+13.619845850 I0419 13:25:54.958466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:25:55.004757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:25:59.877659 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:25:59.87764591 +0000 UTC m=+18.554150014 I0419 13:26:22.621725 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:26:22.621817 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-19 13:26:22.621784664 +0000 UTC m=+41.298288758 I0419 13:26:22.622108 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-19 13:26:22.62210494 +0000 UTC m=+41.298609034 I0419 13:26:22.643607 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-19 13:26:22.643592746 +0000 UTC m=+41.320096840 I0419 13:26:22.669911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:22.669974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:26:22.670005 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-19 13:26:22.669997126 +0000 UTC m=+41.346501230 I0419 13:26:22.814096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-86ww2" condition "Approved" to 2026-04-19 13:26:22.814083728 +0000 UTC m=+41.490587832 I0419 13:26:22.851061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-86ww2" condition "Ready" to 2026-04-19 13:26:22.851045867 +0000 UTC m=+41.527550001 I0419 13:26:22.885859 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:26:22.88584062 +0000 UTC m=+41.562344724 I0419 13:26:22.915706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:22.916100 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:26:22.916091735 +0000 UTC m=+41.592595829 I0419 13:26:22.919776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:22.938191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:08.995193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-140.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:31:08.995504 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-140.nip.io-tls" condition "Issuing" to 2026-04-19 13:31:08.995485324 +0000 UTC m=+327.671989428 I0419 13:31:08.995535 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-140.nip.io-tls" condition "Ready" to 2026-04-19 13:31:08.995525996 +0000 UTC m=+327.672030110 I0419 13:31:09.017491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:09.017578 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-140.nip.io-tls" condition "Ready" to 2026-04-19 13:31:09.017569887 +0000 UTC m=+327.694073981 I0419 13:31:09.072594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:09.102987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-140.nip.io-tls-sfjst" condition "Approved" to 2026-04-19 13:31:09.102967643 +0000 UTC m=+327.779471777 I0419 13:31:09.133669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-140.nip.io-tls-sfjst" condition "Ready" to 2026-04-19 13:31:09.133655275 +0000 UTC m=+327.810159369 I0419 13:31:09.168748 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:31:09.16873222 +0000 UTC m=+327.845236324 I0419 13:31:09.246626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:09.247123 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:31:09.247110967 +0000 UTC m=+327.923615091 I0419 13:31:09.275482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:09.275915 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:31:09.275898807 +0000 UTC m=+327.952402941 I0419 13:32:19.120407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:32:19.120557 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-19 13:32:19.120448033 +0000 UTC m=+397.796952137 I0419 13:32:19.120490 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-19 13:32:19.120466494 +0000 UTC m=+397.796970598 E0419 13:32:19.134070 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:32:19.134110 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-19 13:32:19.134104591 +0000 UTC m=+397.810608695 E0419 13:32:19.134193 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:32:19.140610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:19.140711 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-19 13:32:19.140701135 +0000 UTC m=+397.817205239 E0419 13:32:19.147570 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0419 13:32:19.147687 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:32:19.147732 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:32:19.147763 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0419 13:32:19.158256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:19.180546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dcp8x" condition "Approved" to 2026-04-19 13:32:19.180529961 +0000 UTC m=+397.857034075 I0419 13:32:19.196990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dcp8x" condition "Ready" to 2026-04-19 13:32:19.196975417 +0000 UTC m=+397.873479521 I0419 13:32:19.221381 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:19.221367332 +0000 UTC m=+397.897871456 I0419 13:32:19.239250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:19.239473 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:19.23946683 +0000 UTC m=+397.915970934 I0419 13:32:19.257764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:19.258082 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:19.258070571 +0000 UTC m=+397.934574675 I0419 13:32:24.148741 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:24.148652359 +0000 UTC m=+402.825156453 I0419 13:33:09.363121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:09.363212 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 13:33:09.363174715 +0000 UTC m=+448.039678819 I0419 13:33:09.363482 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-19 13:33:09.363476651 +0000 UTC m=+448.039980755 I0419 13:33:09.363836 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-19 13:33:09.363831419 +0000 UTC m=+448.040335523 I0419 13:33:09.364159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:09.364171 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-19 13:33:09.364167836 +0000 UTC m=+448.040671940 I0419 13:33:09.364363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:09.364372 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-19 13:33:09.364370291 +0000 UTC m=+448.040874385 I0419 13:33:09.364513 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-19 13:33:09.364510174 +0000 UTC m=+448.041014268 I0419 13:33:09.421918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:09.421990 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-19 13:33:09.421982725 +0000 UTC m=+448.098486809 I0419 13:33:09.431692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:09.431769 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-19 13:33:09.431760914 +0000 UTC m=+448.108265008 I0419 13:33:09.432314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:09.432349 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-19 13:33:09.432346076 +0000 UTC m=+448.108850170 I0419 13:33:09.540528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:09.586817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f2g2c" condition "Approved" to 2026-04-19 13:33:09.586805271 +0000 UTC m=+448.263309365 I0419 13:33:09.604037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:09.609646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f2g2c" condition "Ready" to 2026-04-19 13:33:09.609630376 +0000 UTC m=+448.286134480 I0419 13:33:09.609777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:09.635572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-h6mzh" condition "Approved" to 2026-04-19 13:33:09.635556237 +0000 UTC m=+448.312060341 I0419 13:33:09.639223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jz76k" condition "Approved" to 2026-04-19 13:33:09.639211195 +0000 UTC m=+448.315715289 I0419 13:33:09.648015 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:09.648003442 +0000 UTC m=+448.324507546 I0419 13:33:09.655269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jz76k" condition "Ready" to 2026-04-19 13:33:09.655245776 +0000 UTC m=+448.331749880 I0419 13:33:09.661328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-h6mzh" condition "Ready" to 2026-04-19 13:33:09.661322056 +0000 UTC m=+448.337826140 I0419 13:33:09.752228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:10.385643 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:10.385617316 +0000 UTC m=+449.062121400 I0419 13:33:10.386484 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:10.386468464 +0000 UTC m=+449.062972548 I0419 13:33:10.593668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:10.593967 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:10.593961075 +0000 UTC m=+449.270465169 I0419 13:33:10.646907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:10.647620 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:10.647607983 +0000 UTC m=+449.324112117 I0419 13:33:11.046609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:11.151009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:11.152103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:11.248297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:20.213577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dbllj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:20.213642 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dbllj-tls" condition "Issuing" to 2026-04-19 13:33:20.213606055 +0000 UTC m=+458.890110159 I0419 13:33:20.213684 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dbllj-tls" condition "Ready" to 2026-04-19 13:33:20.213665856 +0000 UTC m=+458.890169950 I0419 13:33:20.233517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dbllj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dbllj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:20.233627 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dbllj-tls" condition "Ready" to 2026-04-19 13:33:20.233619819 +0000 UTC m=+458.910123923 I0419 13:33:20.460766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dbllj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dbllj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:20.495170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dbllj-nscjb" condition "Approved" to 2026-04-19 13:33:20.495156824 +0000 UTC m=+459.171660938 I0419 13:33:20.521754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dbllj-nscjb" condition "Ready" to 2026-04-19 13:33:20.521744412 +0000 UTC m=+459.198248506 I0419 13:33:20.550540 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dbllj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:20.550522208 +0000 UTC m=+459.227026302 I0419 13:33:20.575552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dbllj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dbllj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:36.265014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:36.265052 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-19 13:33:36.265043533 +0000 UTC m=+474.941547627 I0419 13:33:36.265594 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 13:33:36.265572973 +0000 UTC m=+474.942077077 I0419 13:33:36.359076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:36.359292 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 13:33:36.359280906 +0000 UTC m=+475.035785040 I0419 13:33:36.461367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:36.503844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mdhpt" condition "Approved" to 2026-04-19 13:33:36.503831509 +0000 UTC m=+475.180335613 I0419 13:33:36.600779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mdhpt" condition "Ready" to 2026-04-19 13:33:36.600767046 +0000 UTC m=+475.277271140 I0419 13:33:36.636272 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:36.636254902 +0000 UTC m=+475.312758986 I0419 13:33:36.662141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:36.662456 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:36.662447993 +0000 UTC m=+475.338952087 I0419 13:33:36.669623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:36.682635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:36.683052 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:36.683040982 +0000 UTC m=+475.359545086 I0419 13:36:54.594477 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:36:54.594632 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-19 13:36:54.594622755 +0000 UTC m=+673.271126869 I0419 13:36:54.594643 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-19 13:36:54.594612705 +0000 UTC m=+673.271116829 I0419 13:36:54.617630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:36:54.618487 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-19 13:36:54.618476888 +0000 UTC m=+673.294981002 I0419 13:36:54.920719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:36:54.956287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w4ttw" condition "Approved" to 2026-04-19 13:36:54.956277826 +0000 UTC m=+673.632781930 I0419 13:36:54.987144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w4ttw" condition "Ready" to 2026-04-19 13:36:54.987123486 +0000 UTC m=+673.663627590 I0419 13:36:55.022244 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:36:55.022218131 +0000 UTC m=+673.698722225 I0419 13:36:55.046574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:35.793874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:37:35.793923 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-19 13:37:35.793912339 +0000 UTC m=+714.470416463 I0419 13:37:35.794403 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-19 13:37:35.794394186 +0000 UTC m=+714.470898310 I0419 13:37:35.821335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:35.821404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:37:35.821440 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-19 13:37:35.821433529 +0000 UTC m=+714.497937633 I0419 13:37:36.026939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:36.042666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-df4pz" condition "Approved" to 2026-04-19 13:37:36.042654015 +0000 UTC m=+714.719158119 I0419 13:37:36.058878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-df4pz" condition "Ready" to 2026-04-19 13:37:36.058866795 +0000 UTC m=+714.735370909 I0419 13:37:36.097746 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:37:36.097706673 +0000 UTC m=+714.774210777 I0419 13:37:36.121333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:36.121576 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:37:36.121568869 +0000 UTC m=+714.798072963 I0419 13:37:36.143750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"