I0417 00:28:55.546187 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 00:28:55.546310 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 00:28:55.546395 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 00:28:55.552936 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 00:28:55.553538 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 00:28:55.553589 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 00:28:55.553628 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 00:28:55.557651 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 00:28:55.571963 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 00:28:55.577753 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 00:28:55.583955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 00:28:55.587214 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 00:28:55.587250 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 00:28:55.589921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 00:28:55.592290 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 00:28:55.592316 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 00:28:55.592320 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 00:28:55.594768 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 00:28:55.597301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 00:28:55.599382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 00:28:55.604701 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 00:28:55.608472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 00:28:55.612084 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 00:28:55.615990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 00:28:55.619723 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 00:28:55.619881 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 00:28:55.623824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 00:28:55.629202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 00:28:55.631741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 00:28:55.636504 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 00:28:55.638846 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 00:28:55.638873 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 00:28:55.639057 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 00:28:55.640388 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:28:55.642206 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:28:55.642258 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:28:55.642500 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:28:55.642550 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:28:55.642823 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:28:55.643112 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:28:55.643960 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:28:55.644549 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:28:55.725230 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:06.771818 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 00:29:06.770907137 +0000 UTC m=+11.252453347 I0417 00:29:07.591420 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 00:29:07.591404746 +0000 UTC m=+12.072950956 I0417 00:29:07.592386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:29:07.592586 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 00:29:07.592576232 +0000 UTC m=+12.074122432 E0417 00:29:07.610199 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 00:29:07.610401 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 00:29:07.610355949 +0000 UTC m=+12.091902139 E0417 00:29:07.610458 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 00:29:07.615587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:07.615656 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:29:07.615671 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 00:29:07.615666983 +0000 UTC m=+12.097213173 E0417 00:29:07.624799 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 00:29:07.625027 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 00:29:07.625201 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 00:29:07.625284 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 00:29:07.655365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:07.660176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cwztd" condition "Approved" to 2026-04-17 00:29:07.6601493 +0000 UTC m=+12.141695490 I0417 00:29:07.675670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cwztd" condition "Ready" to 2026-04-17 00:29:07.675661798 +0000 UTC m=+12.157207988 I0417 00:29:07.699849 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:29:07.699826971 +0000 UTC m=+12.181373191 I0417 00:29:07.716515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:07.716900 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:29:07.716889416 +0000 UTC m=+12.198435606 I0417 00:29:07.736517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:07.737220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:12.626018 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:29:12.626004656 +0000 UTC m=+17.107550836 I0417 00:29:34.881113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:29:34.881154 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 00:29:34.881147525 +0000 UTC m=+39.362693705 I0417 00:29:34.881163 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 00:29:34.881146625 +0000 UTC m=+39.362692815 I0417 00:29:34.896663 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 00:29:34.89665215 +0000 UTC m=+39.378198330 I0417 00:29:34.907885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:34.907963 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 00:29:34.907957865 +0000 UTC m=+39.389504045 I0417 00:29:35.199414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:35.233409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mjvft" condition "Approved" to 2026-04-17 00:29:35.233399486 +0000 UTC m=+39.714945666 I0417 00:29:35.268297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mjvft" condition "Ready" to 2026-04-17 00:29:35.268284295 +0000 UTC m=+39.749830515 I0417 00:29:35.306971 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:29:35.306956711 +0000 UTC m=+39.788502901 I0417 00:29:35.321598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:35.321827 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:29:35.321823327 +0000 UTC m=+39.803369507 I0417 00:29:35.348701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:33:50.702749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-244.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:33:50.702815 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Issuing" to 2026-04-17 00:33:50.702805766 +0000 UTC m=+295.184351976 I0417 00:33:50.703079 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready" to 2026-04-17 00:33:50.703064333 +0000 UTC m=+295.184610513 I0417 00:33:50.734146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:33:50.734243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-244.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:33:50.734263 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Issuing" to 2026-04-17 00:33:50.734258087 +0000 UTC m=+295.215804267 I0417 00:33:50.994403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-244.nip.io-tls-bznqz" condition "Approved" to 2026-04-17 00:33:50.994393617 +0000 UTC m=+295.475939797 I0417 00:33:50.997566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:33:51.017025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-244.nip.io-tls-bznqz" condition "Ready" to 2026-04-17 00:33:51.017017367 +0000 UTC m=+295.498563557 I0417 00:33:51.041202 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:33:51.041189838 +0000 UTC m=+295.522736028 I0417 00:33:51.067605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:33:51.068111 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:33:51.068102341 +0000 UTC m=+295.549648531 I0417 00:33:51.087026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:34:53.068606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:34:53.068636 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 00:34:53.068628436 +0000 UTC m=+357.550174626 I0417 00:34:53.068939 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 00:34:53.068923594 +0000 UTC m=+357.550469794 E0417 00:34:53.080397 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 00:34:53.080595 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 00:34:53.080583063 +0000 UTC m=+357.562129273 E0417 00:34:53.081701 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 00:34:53.082651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:34:53.082700 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 00:34:53.082693417 +0000 UTC m=+357.564239607 E0417 00:34:53.115918 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 00:34:53.116188 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 00:34:53.116240 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 00:34:53.116300 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 00:34:53.120946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:34:53.140451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dr8m9" condition "Approved" to 2026-04-17 00:34:53.140441908 +0000 UTC m=+357.621988098 I0417 00:34:53.151343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dr8m9" condition "Ready" to 2026-04-17 00:34:53.151334728 +0000 UTC m=+357.632880908 I0417 00:34:53.164627 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:34:53.164615689 +0000 UTC m=+357.646161879 I0417 00:34:53.178775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:34:58.116482 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:34:58.11645787 +0000 UTC m=+362.598004080 I0417 00:35:38.679787 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 00:35:38.679777359 +0000 UTC m=+403.161323539 I0417 00:35:38.680368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:38.680388 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 00:35:38.680385215 +0000 UTC m=+403.161931395 I0417 00:35:38.699488 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 00:35:38.69947767 +0000 UTC m=+403.181023850 I0417 00:35:38.701443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:38.705803 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 00:35:38.705788591 +0000 UTC m=+403.187334791 I0417 00:35:38.702401 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:38.709036 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 00:35:38.709028613 +0000 UTC m=+403.190574793 I0417 00:35:38.703780 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 00:35:38.702509288 +0000 UTC m=+403.184055478 I0417 00:35:38.709660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:38.709711 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 00:35:38.70970727 +0000 UTC m=+403.191253440 I0417 00:35:38.732802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:38.732848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:38.732862 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 00:35:38.73285794 +0000 UTC m=+403.214404120 I0417 00:35:38.735747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:38.735815 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 00:35:38.735807385 +0000 UTC m=+403.217353575 I0417 00:35:38.903744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:38.932172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rkdtb" condition "Approved" to 2026-04-17 00:35:38.932156392 +0000 UTC m=+403.413702592 I0417 00:35:38.955702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rkdtb" condition "Ready" to 2026-04-17 00:35:38.955691902 +0000 UTC m=+403.437238082 I0417 00:35:38.984384 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:38.984375152 +0000 UTC m=+403.465921332 I0417 00:35:39.008881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:39.009267 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:39.009258675 +0000 UTC m=+403.490804885 I0417 00:35:39.011366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:39.040733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:39.058507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4d6lw" condition "Approved" to 2026-04-17 00:35:39.058491539 +0000 UTC m=+403.540037729 I0417 00:35:39.084720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4d6lw" condition "Ready" to 2026-04-17 00:35:39.084705975 +0000 UTC m=+403.566252165 I0417 00:35:39.116444 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:39.116433912 +0000 UTC m=+403.597980082 I0417 00:35:39.167753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:39.168120 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:39.168114578 +0000 UTC m=+403.649660748 I0417 00:35:39.473313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jzx7j" condition "Approved" to 2026-04-17 00:35:39.473303435 +0000 UTC m=+403.954849605 I0417 00:35:39.517407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:39.880389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jzx7j" condition "Ready" to 2026-04-17 00:35:39.880378434 +0000 UTC m=+404.361924614 I0417 00:35:40.115843 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:40.115831676 +0000 UTC m=+404.597377856 I0417 00:35:40.216221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:45.126753 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls" condition "Ready" to 2026-04-17 00:35:45.126711101 +0000 UTC m=+409.608257291 I0417 00:35:45.127154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:45.127177 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls" condition "Issuing" to 2026-04-17 00:35:45.127173002 +0000 UTC m=+409.608719192 I0417 00:35:45.142546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:45.142618 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls" condition "Ready" to 2026-04-17 00:35:45.142611754 +0000 UTC m=+409.624157934 I0417 00:35:45.393806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:45.418966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6kvpw-b7tf7" condition "Approved" to 2026-04-17 00:35:45.418953041 +0000 UTC m=+409.900499231 I0417 00:35:45.441962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6kvpw-b7tf7" condition "Ready" to 2026-04-17 00:35:45.441951276 +0000 UTC m=+409.923497456 I0417 00:35:45.478673 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:45.478660429 +0000 UTC m=+409.960206609 I0417 00:35:45.494493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6kvpw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:58.274229 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:58.274262 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 00:35:58.274254867 +0000 UTC m=+422.755801057 I0417 00:35:58.274478 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 00:35:58.274462693 +0000 UTC m=+422.756008883 I0417 00:35:58.295932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:58.296033 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 00:35:58.29602618 +0000 UTC m=+422.777572370 I0417 00:35:58.417907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:58.449780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-frxlj" condition "Approved" to 2026-04-17 00:35:58.449770853 +0000 UTC m=+422.931317043 I0417 00:35:58.467783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-frxlj" condition "Ready" to 2026-04-17 00:35:58.467776 +0000 UTC m=+422.949322190 I0417 00:35:58.500575 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:58.500565822 +0000 UTC m=+422.982112012 I0417 00:35:58.522889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:58.523165 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:58.523158885 +0000 UTC m=+423.004705065 I0417 00:35:58.541578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:58.548546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:13.654746 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 00:39:13.654715161 +0000 UTC m=+618.136261351 I0417 00:39:13.655207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:39:13.655256 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 00:39:13.655242885 +0000 UTC m=+618.136789095 I0417 00:39:13.672281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:13.672353 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:39:13.672373 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 00:39:13.672367124 +0000 UTC m=+618.153913314 I0417 00:39:13.797125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:13.806628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-h6r4r" condition "Approved" to 2026-04-17 00:39:13.806614458 +0000 UTC m=+618.288160628 I0417 00:39:13.830581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-h6r4r" condition "Ready" to 2026-04-17 00:39:13.830567147 +0000 UTC m=+618.312113327 I0417 00:39:13.869569 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:39:13.869553754 +0000 UTC m=+618.351099934 I0417 00:39:13.900273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:13.900559 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:39:13.900553001 +0000 UTC m=+618.382099191 I0417 00:39:13.915511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:13.915764 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:39:13.915758513 +0000 UTC m=+618.397304703 I0417 00:39:13.917288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:57.878851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:39:57.878995 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 00:39:57.878961937 +0000 UTC m=+662.360508117 I0417 00:39:57.879017 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 00:39:57.879001708 +0000 UTC m=+662.360547918 I0417 00:39:57.900154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:57.900291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:39:57.900334 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 00:39:57.900325272 +0000 UTC m=+662.381871462 I0417 00:39:58.102729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dzsbq" condition "Approved" to 2026-04-17 00:39:58.102706628 +0000 UTC m=+662.584252818 I0417 00:39:58.123028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dzsbq" condition "Ready" to 2026-04-17 00:39:58.123021256 +0000 UTC m=+662.604567426 I0417 00:39:58.163339 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:39:58.163322374 +0000 UTC m=+662.644868564 I0417 00:39:58.189316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"