I0423 07:42:00.386493 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0423 07:42:00.386632 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0423 07:42:00.386761 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0423 07:42:00.393387 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0423 07:42:00.393880 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0423 07:42:00.393989 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0423 07:42:00.394094 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0423 07:42:00.397009 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0423 07:42:00.417375 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0423 07:42:00.418044 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0423 07:42:00.421696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0423 07:42:00.424185 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0423 07:42:00.429105 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0423 07:42:00.431982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0423 07:42:00.434588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0423 07:42:00.437252 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0423 07:42:00.437286 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0423 07:42:00.437320 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0423 07:42:00.440020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0423 07:42:00.442521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0423 07:42:00.444367 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0423 07:42:00.447355 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0423 07:42:00.450224 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0423 07:42:00.453909 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0423 07:42:00.456483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0423 07:42:00.458932 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0423 07:42:00.461530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0423 07:42:00.463362 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0423 07:42:00.463383 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0423 07:42:00.463393 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0423 07:42:00.465440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0423 07:42:00.467054 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0423 07:42:00.468287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0423 07:42:00.470190 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 07:42:00.472505 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 07:42:00.472159 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 07:42:00.473524 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 07:42:00.474127 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 07:42:00.474174 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 07:42:00.475460 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 07:42:00.475643 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 07:42:00.475979 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 07:42:00.561533 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 07:42:13.518273 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-23 07:42:13.518244557 +0000 UTC m=+13.165305535 I0423 07:42:14.191131 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 07:42:14.191110879 +0000 UTC m=+13.838171887 I0423 07:42:14.191431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:42:14.191546 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 07:42:14.191533174 +0000 UTC m=+13.838594202 I0423 07:42:14.208292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:42:14.208626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:42:14.208644 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 07:42:14.208639473 +0000 UTC m=+13.855700451 E0423 07:42:14.209371 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 07:42:14.209477 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-23 07:42:14.209467634 +0000 UTC m=+13.856528602 E0423 07:42:14.209508 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 07:42:14.223267 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0423 07:42:14.223452 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 07:42:14.223584 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 07:42:14.223649 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0423 07:42:14.260072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-n8q78" condition "Approved" to 2026-04-23 07:42:14.26005932 +0000 UTC m=+13.907120298 I0423 07:42:14.275043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-n8q78" condition "Ready" to 2026-04-23 07:42:14.275033081 +0000 UTC m=+13.922094059 I0423 07:42:14.295648 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:42:14.295633856 +0000 UTC m=+13.942694834 I0423 07:42:14.316661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:42:14.316984 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:42:14.316977792 +0000 UTC m=+13.964038770 I0423 07:42:14.331430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:42:14.331671 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:42:14.331662029 +0000 UTC m=+13.978722997 I0423 07:42:14.332695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:42:19.224274 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:42:19.224259835 +0000 UTC m=+18.871320843 I0423 07:42:40.427076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:42:40.427380 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-23 07:42:40.426867904 +0000 UTC m=+40.073928882 I0423 07:42:40.427861 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 07:42:40.427146557 +0000 UTC m=+40.074207545 I0423 07:42:40.445913 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-23 07:42:40.445899962 +0000 UTC m=+40.092960930 I0423 07:42:40.467439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:42:40.467499 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:42:40.467656 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 07:42:40.467638984 +0000 UTC m=+40.114699962 I0423 07:42:40.666045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b6m7b" condition "Approved" to 2026-04-23 07:42:40.666014085 +0000 UTC m=+40.313075053 I0423 07:42:40.703469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b6m7b" condition "Ready" to 2026-04-23 07:42:40.703455073 +0000 UTC m=+40.350516041 I0423 07:42:40.735685 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:42:40.735667285 +0000 UTC m=+40.382728263 I0423 07:42:40.763183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:42:40.820094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:47:07.377740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-47.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:47:07.377812 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-47.nip.io-tls" condition "Issuing" to 2026-04-23 07:47:07.37780445 +0000 UTC m=+307.024865458 I0423 07:47:07.376660 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-47.nip.io-tls" condition "Ready" to 2026-04-23 07:47:07.376628949 +0000 UTC m=+307.023689957 I0423 07:47:07.399597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-47.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-47.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:47:07.399674 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-47.nip.io-tls" condition "Ready" to 2026-04-23 07:47:07.399664874 +0000 UTC m=+307.046725852 I0423 07:47:07.453813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-47.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-47.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:47:07.478604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-47.nip.io-tls-glpf7" condition "Approved" to 2026-04-23 07:47:07.478587121 +0000 UTC m=+307.125648139 I0423 07:47:07.508467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-47.nip.io-tls-glpf7" condition "Ready" to 2026-04-23 07:47:07.508453232 +0000 UTC m=+307.155514230 I0423 07:47:07.533642 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-47.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:47:07.533600516 +0000 UTC m=+307.180661524 I0423 07:47:07.549938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-47.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-47.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:11.598796 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 07:48:11.598746054 +0000 UTC m=+371.245807052 I0423 07:48:11.599424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:48:11.599476 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-23 07:48:11.599459635 +0000 UTC m=+371.246520613 E0423 07:48:11.611998 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 07:48:11.612051 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-23 07:48:11.612041944 +0000 UTC m=+371.259102922 E0423 07:48:11.612104 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 07:48:11.616020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:11.616169 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 07:48:11.616160342 +0000 UTC m=+371.263221320 E0423 07:48:11.628860 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0423 07:48:11.628973 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 07:48:11.629001 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 07:48:11.629075 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0423 07:48:11.632761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:11.632812 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 07:48:11.632804098 +0000 UTC m=+371.279865076 I0423 07:48:11.633530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jm8lz" condition "Approved" to 2026-04-23 07:48:11.633523551 +0000 UTC m=+371.280584529 I0423 07:48:11.646056 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 07:48:11.646043368 +0000 UTC m=+371.293104336 I0423 07:48:11.647995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jm8lz" condition "Ready" to 2026-04-23 07:48:11.64798665 +0000 UTC m=+371.295047628 I0423 07:48:11.653419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:11.667780 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:48:11.667758938 +0000 UTC m=+371.314819946 I0423 07:48:11.686229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:11.686543 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:48:11.686532678 +0000 UTC m=+371.333593656 I0423 07:48:11.704904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:11.704993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:16.630153 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:48:16.63013851 +0000 UTC m=+376.277199518 I0423 07:48:58.569203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:48:58.569271 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 07:48:58.569265684 +0000 UTC m=+418.216326652 I0423 07:48:58.569261 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 07:48:58.569233014 +0000 UTC m=+418.216293982 I0423 07:48:58.569512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:48:58.569532 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-23 07:48:58.569529888 +0000 UTC m=+418.216590846 I0423 07:48:58.569659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:48:58.569678 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 07:48:58.569674921 +0000 UTC m=+418.216735889 I0423 07:48:58.569870 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-23 07:48:58.569867154 +0000 UTC m=+418.216928122 I0423 07:48:58.572781 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-23 07:48:58.572767199 +0000 UTC m=+418.219828187 I0423 07:48:58.603617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:58.603681 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:48:58.603698 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-23 07:48:58.603693275 +0000 UTC m=+418.250754243 I0423 07:48:58.618260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:58.618341 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-23 07:48:58.618332504 +0000 UTC m=+418.265393482 I0423 07:48:58.618601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:58.619237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:48:58.619317 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 07:48:58.619308299 +0000 UTC m=+418.266369277 I0423 07:48:58.758293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:58.788973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-spvqx" condition "Approved" to 2026-04-23 07:48:58.788961799 +0000 UTC m=+418.436022777 I0423 07:48:58.820765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-spvqx" condition "Ready" to 2026-04-23 07:48:58.820758317 +0000 UTC m=+418.467819295 I0423 07:48:58.910611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:58.948700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cjq6c" condition "Approved" to 2026-04-23 07:48:58.948689632 +0000 UTC m=+418.595750600 I0423 07:48:58.967584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cjq6c" condition "Ready" to 2026-04-23 07:48:58.967575258 +0000 UTC m=+418.614636216 I0423 07:48:59.000116 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:48:59.000103798 +0000 UTC m=+418.647164766 I0423 07:48:59.016263 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:48:59.016248101 +0000 UTC m=+418.663309079 I0423 07:48:59.034924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:59.046311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gnw8r" condition "Approved" to 2026-04-23 07:48:59.046301222 +0000 UTC m=+418.693362190 I0423 07:48:59.054235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:48:59.113810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gnw8r" condition "Ready" to 2026-04-23 07:48:59.113790299 +0000 UTC m=+418.760851307 I0423 07:48:59.793966 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:48:59.793955949 +0000 UTC m=+419.441016927 I0423 07:49:00.053702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:49:00.054031 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:49:00.054025601 +0000 UTC m=+419.701086559 I0423 07:49:00.293896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:49:00.340970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:49:07.576638 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rn58g-tls" condition "Ready" to 2026-04-23 07:49:07.576622957 +0000 UTC m=+427.223683935 I0423 07:49:07.576907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rn58g-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:49:07.576940 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rn58g-tls" condition "Issuing" to 2026-04-23 07:49:07.576932681 +0000 UTC m=+427.223993649 I0423 07:49:07.597200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rn58g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rn58g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:49:07.597515 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rn58g-tls" condition "Ready" to 2026-04-23 07:49:07.597300508 +0000 UTC m=+427.244361506 I0423 07:49:07.803428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rn58g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rn58g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:49:07.868464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rn58g-rpzvj" condition "Approved" to 2026-04-23 07:49:07.868451581 +0000 UTC m=+427.515512559 I0423 07:49:07.927737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rn58g-rpzvj" condition "Ready" to 2026-04-23 07:49:07.927726982 +0000 UTC m=+427.574787960 I0423 07:49:07.971957 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rn58g-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:49:07.971946109 +0000 UTC m=+427.619007077 I0423 07:49:07.996929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rn58g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rn58g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:49:24.221623 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-23 07:49:24.22159178 +0000 UTC m=+443.868652868 I0423 07:49:24.222086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:49:24.222174 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 07:49:24.222165009 +0000 UTC m=+443.869225987 I0423 07:49:24.245360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:49:24.245503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:49:24.245548 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 07:49:24.245541336 +0000 UTC m=+443.892602304 I0423 07:49:24.401452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:49:24.414735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d8czf" condition "Approved" to 2026-04-23 07:49:24.414721295 +0000 UTC m=+444.061782273 I0423 07:49:24.431937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d8czf" condition "Ready" to 2026-04-23 07:49:24.431928059 +0000 UTC m=+444.078989027 I0423 07:49:24.465079 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:49:24.465067286 +0000 UTC m=+444.112128254 I0423 07:49:24.487444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:52:33.372252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:52:33.372300 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 07:52:33.372281148 +0000 UTC m=+633.019342176 I0423 07:52:33.372372 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-23 07:52:33.372346531 +0000 UTC m=+633.019407509 I0423 07:52:33.394859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:52:33.394981 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-23 07:52:33.394975073 +0000 UTC m=+633.042036031 I0423 07:52:33.736914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:52:33.766065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z76qq" condition "Approved" to 2026-04-23 07:52:33.766054881 +0000 UTC m=+633.413115839 I0423 07:52:33.784976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z76qq" condition "Ready" to 2026-04-23 07:52:33.784963414 +0000 UTC m=+633.432024382 I0423 07:52:33.823429 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:52:33.823414124 +0000 UTC m=+633.470475102 I0423 07:52:33.843732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:52:33.844261 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:52:33.844254668 +0000 UTC m=+633.491315626 I0423 07:52:33.864263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:52:33.864475 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:52:33.86446704 +0000 UTC m=+633.511528018 I0423 07:52:33.873612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:53:12.533765 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 07:53:12.533831 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-23 07:53:12.533802389 +0000 UTC m=+672.180863357 I0423 07:53:12.534150 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 07:53:12.534146251 +0000 UTC m=+672.181207219 I0423 07:53:12.562598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:53:12.562739 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 07:53:12.56272556 +0000 UTC m=+672.209786558 I0423 07:53:12.708058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 07:53:12.746901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-52gmm" condition "Approved" to 2026-04-23 07:53:12.746888537 +0000 UTC m=+672.393949505 I0423 07:53:12.771558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-52gmm" condition "Ready" to 2026-04-23 07:53:12.771546281 +0000 UTC m=+672.418607239 I0423 07:53:12.798063 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 07:53:12.798052928 +0000 UTC m=+672.445113896 I0423 07:53:12.824886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"