I0411 17:41:58.630666 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0411 17:41:58.630873 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0411 17:41:58.631042 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0411 17:41:58.637519 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0411 17:41:58.638101 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0411 17:41:58.638165 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0411 17:41:58.638184 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0411 17:41:58.640999 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0411 17:41:58.657119 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0411 17:41:58.657321 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0411 17:41:58.660714 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0411 17:41:58.660808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0411 17:41:58.663441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0411 17:41:58.669245 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0411 17:41:58.672405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0411 17:41:58.674990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0411 17:41:58.677341 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0411 17:41:58.679744 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0411 17:41:58.681694 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0411 17:41:58.683831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0411 17:41:58.689455 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0411 17:41:58.693418 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0411 17:41:58.693479 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0411 17:41:58.693480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0411 17:41:58.696848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0411 17:41:58.698619 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0411 17:41:58.700963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0411 17:41:58.702879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0411 17:41:58.704896 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0411 17:41:58.704939 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0411 17:41:58.706863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0411 17:41:58.709208 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0411 17:41:58.709733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0411 17:41:58.712251 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:41:58.713870 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:41:58.713879 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:41:58.714873 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:41:58.731198 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:41:58.754916 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:41:58.765929 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:41:58.779432 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:41:58.798128 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:41:58.799195 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:42:11.286376 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-11 17:42:11.286338873 +0000 UTC m=+12.685036409 I0411 17:42:12.027836 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-11 17:42:12.027820939 +0000 UTC m=+13.426518465 I0411 17:42:12.028223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:42:12.028344 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 17:42:12.028330861 +0000 UTC m=+13.427028397 E0411 17:42:12.042468 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:42:12.042550 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-11 17:42:12.042543488 +0000 UTC m=+13.441240984 E0411 17:42:12.042572 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:42:12.045694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:42:12.045827 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-11 17:42:12.045744356 +0000 UTC m=+13.444441862 E0411 17:42:12.061296 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0411 17:42:12.061653 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:42:12.061782 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:42:12.061900 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0411 17:42:12.067791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:42:12.087191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gl959" condition "Approved" to 2026-04-11 17:42:12.087179527 +0000 UTC m=+13.485877033 I0411 17:42:12.100076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gl959" condition "Ready" to 2026-04-11 17:42:12.100065852 +0000 UTC m=+13.498763338 I0411 17:42:12.120622 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:42:12.120608672 +0000 UTC m=+13.519306178 I0411 17:42:12.139150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:42:12.139720 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:42:12.139707999 +0000 UTC m=+13.538405525 I0411 17:42:12.154785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:42:12.155045 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:42:12.155038872 +0000 UTC m=+13.553736378 I0411 17:42:12.157902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:42:17.062866 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:42:17.062832153 +0000 UTC m=+18.461529659 I0411 17:42:37.174286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:42:37.174344 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 17:42:37.174313164 +0000 UTC m=+38.573010670 I0411 17:42:37.174661 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-11 17:42:37.174645831 +0000 UTC m=+38.573343327 I0411 17:42:37.188167 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-11 17:42:37.188154307 +0000 UTC m=+38.586851813 I0411 17:42:37.193184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:42:37.193773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:42:37.193850 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 17:42:37.193841206 +0000 UTC m=+38.592538712 I0411 17:42:37.426121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:42:37.434354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sjf4d" condition "Approved" to 2026-04-11 17:42:37.434342238 +0000 UTC m=+38.833039754 I0411 17:42:37.462643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sjf4d" condition "Ready" to 2026-04-11 17:42:37.462632147 +0000 UTC m=+38.861329653 I0411 17:42:37.494884 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:42:37.494875592 +0000 UTC m=+38.893573088 I0411 17:42:37.519078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:46:58.654448 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-194.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:46:58.654691 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Issuing" to 2026-04-11 17:46:58.654477734 +0000 UTC m=+300.053175240 I0411 17:46:58.655191 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Ready" to 2026-04-11 17:46:58.655183079 +0000 UTC m=+300.053880605 I0411 17:46:58.683334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:46:58.683421 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Ready" to 2026-04-11 17:46:58.683413242 +0000 UTC m=+300.082110748 I0411 17:46:58.783149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:46:58.809078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-194.nip.io-tls-r8q66" condition "Approved" to 2026-04-11 17:46:58.809068963 +0000 UTC m=+300.207766469 I0411 17:46:58.836622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-194.nip.io-tls-r8q66" condition "Ready" to 2026-04-11 17:46:58.836605031 +0000 UTC m=+300.235302537 I0411 17:46:58.864005 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:46:58.863996135 +0000 UTC m=+300.262693631 I0411 17:46:58.881068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:46:58.881340 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:46:58.881334648 +0000 UTC m=+300.280032154 I0411 17:46:58.892733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:46:58.905382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:04.552830 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 17:48:04.552786517 +0000 UTC m=+365.951484043 I0411 17:48:04.553230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:04.553306 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 17:48:04.553287715 +0000 UTC m=+365.951985241 E0411 17:48:04.565270 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:48:04.565339 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-11 17:48:04.565331615 +0000 UTC m=+365.964029121 E0411 17:48:04.565400 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:48:04.569031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:04.569456 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 17:48:04.569450013 +0000 UTC m=+365.968147519 E0411 17:48:04.580117 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0411 17:48:04.580910 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:48:04.580962 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:48:04.583524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:04.583628 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 17:48:04.583619728 +0000 UTC m=+365.982317224 E0411 17:48:04.583888 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0411 17:48:04.592403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nwq7s" condition "Approved" to 2026-04-11 17:48:04.592391614 +0000 UTC m=+365.991089120 I0411 17:48:04.601977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nwq7s" condition "Ready" to 2026-04-11 17:48:04.601970512 +0000 UTC m=+366.000668008 I0411 17:48:04.619471 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:04.619455453 +0000 UTC m=+366.018152949 I0411 17:48:04.635073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:04.635346 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:04.635339595 +0000 UTC m=+366.034037091 I0411 17:48:04.639946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:04.652182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:09.581075 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:09.581026647 +0000 UTC m=+370.979724183 I0411 17:48:49.149291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:49.149385 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 17:48:49.149357391 +0000 UTC m=+410.548054877 I0411 17:48:49.149957 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-11 17:48:49.14995223 +0000 UTC m=+410.548649736 I0411 17:48:49.150607 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-11 17:48:49.149340551 +0000 UTC m=+410.548038057 I0411 17:48:49.150861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:49.150885 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 17:48:49.150880953 +0000 UTC m=+410.549578449 I0411 17:48:49.175623 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:49.175684 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-11 17:48:49.175676997 +0000 UTC m=+410.574374493 I0411 17:48:49.175969 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 17:48:49.175947911 +0000 UTC m=+410.574645447 I0411 17:48:49.220027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:49.220122 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:49.220164 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 17:48:49.220154619 +0000 UTC m=+410.618852145 I0411 17:48:49.220415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:49.220579 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 17:48:49.220501614 +0000 UTC m=+410.619199140 I0411 17:48:49.234450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:49.234574 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 17:48:49.234566911 +0000 UTC m=+410.633264417 I0411 17:48:49.393751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:49.422783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jkmmp" condition "Approved" to 2026-04-11 17:48:49.422770901 +0000 UTC m=+410.821468407 I0411 17:48:49.439735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jkmmp" condition "Ready" to 2026-04-11 17:48:49.43972455 +0000 UTC m=+410.838422056 I0411 17:48:49.467910 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:49.467900393 +0000 UTC m=+410.866597899 I0411 17:48:49.498187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:49.498351 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:49.49834594 +0000 UTC m=+410.897043436 I0411 17:48:49.552810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:49.580334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:49.612825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:49.644661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9zjnw" condition "Approved" to 2026-04-11 17:48:49.644653396 +0000 UTC m=+411.043350882 I0411 17:48:49.661047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9zjnw" condition "Ready" to 2026-04-11 17:48:49.661038547 +0000 UTC m=+411.059736043 I0411 17:48:49.704528 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:49.704516074 +0000 UTC m=+411.103213570 I0411 17:48:49.843446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:49.843941 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:49.843932889 +0000 UTC m=+411.242630385 I0411 17:48:49.997890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-72lps" condition "Approved" to 2026-04-11 17:48:49.997876897 +0000 UTC m=+411.396574413 I0411 17:48:50.096449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:50.156273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-72lps" condition "Ready" to 2026-04-11 17:48:50.156261976 +0000 UTC m=+411.554959482 I0411 17:48:50.698647 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:50.698625833 +0000 UTC m=+412.097323339 I0411 17:48:50.795141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:50.795407 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:50.795400328 +0000 UTC m=+412.194097814 I0411 17:48:50.991287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:55.794214 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-66k4q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:55.794264 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-66k4q-tls" condition "Issuing" to 2026-04-11 17:48:55.794245637 +0000 UTC m=+417.192943133 I0411 17:48:55.794279 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-66k4q-tls" condition "Ready" to 2026-04-11 17:48:55.794262088 +0000 UTC m=+417.192959604 I0411 17:48:55.841306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-66k4q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-66k4q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:55.841387 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-66k4q-tls" condition "Ready" to 2026-04-11 17:48:55.841378388 +0000 UTC m=+417.240075894 I0411 17:48:56.093658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-66k4q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-66k4q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:56.168259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-66k4q-4jq8n" condition "Approved" to 2026-04-11 17:48:56.16824897 +0000 UTC m=+417.566946466 I0411 17:48:56.238151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-66k4q-4jq8n" condition "Ready" to 2026-04-11 17:48:56.238131348 +0000 UTC m=+417.636828884 I0411 17:48:56.440322 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-66k4q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:56.440310435 +0000 UTC m=+417.839007961 I0411 17:48:56.549920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-66k4q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-66k4q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:56.688464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-66k4q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-66k4q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:09.862019 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-11 17:49:09.861996322 +0000 UTC m=+431.260693868 I0411 17:49:09.862047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:09.862226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 17:49:09.862213345 +0000 UTC m=+431.260910881 I0411 17:49:09.902647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:09.902727 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-11 17:49:09.902719423 +0000 UTC m=+431.301416929 I0411 17:49:09.984931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:10.051020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vxsp5" condition "Approved" to 2026-04-11 17:49:10.05101136 +0000 UTC m=+431.449708856 I0411 17:49:10.108034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vxsp5" condition "Ready" to 2026-04-11 17:49:10.108025037 +0000 UTC m=+431.506722523 I0411 17:49:10.136077 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:10.136066299 +0000 UTC m=+431.534763795 I0411 17:49:10.160789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:10.163147 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:10.163137338 +0000 UTC m=+431.561834844 I0411 17:49:10.180298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:19.837563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:52:19.837690 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-11 17:52:19.837648332 +0000 UTC m=+621.236345858 I0411 17:52:19.837690 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-11 17:52:19.837665972 +0000 UTC m=+621.236363488 I0411 17:52:19.858148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:19.858223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:52:19.858237 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-11 17:52:19.858232739 +0000 UTC m=+621.256930235 I0411 17:52:20.116608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:20.121138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lzndc" condition "Approved" to 2026-04-11 17:52:20.121115613 +0000 UTC m=+621.519813129 I0411 17:52:20.138237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lzndc" condition "Ready" to 2026-04-11 17:52:20.138222252 +0000 UTC m=+621.536919748 I0411 17:52:20.172998 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:52:20.172982524 +0000 UTC m=+621.571680020 I0411 17:52:20.197352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:20.197716 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:52:20.197709437 +0000 UTC m=+621.596406933 I0411 17:52:20.208756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:52:20.209134 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:52:20.209124482 +0000 UTC m=+621.607821988 I0411 17:53:00.136090 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:53:00.136196 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-11 17:53:00.136113954 +0000 UTC m=+661.534811450 I0411 17:53:00.141021 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-11 17:53:00.141004266 +0000 UTC m=+661.539701772 I0411 17:53:00.154123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:00.154186 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-11 17:53:00.154180338 +0000 UTC m=+661.552877834 I0411 17:53:00.516744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:00.547773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-p7r29" condition "Approved" to 2026-04-11 17:53:00.54776252 +0000 UTC m=+661.946460006 I0411 17:53:00.569011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-p7r29" condition "Ready" to 2026-04-11 17:53:00.569000147 +0000 UTC m=+661.967697643 I0411 17:53:00.595825 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:53:00.595811707 +0000 UTC m=+661.994509213 I0411 17:53:00.615079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"