I0407 00:01:26.013366 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 00:01:26.013596 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 00:01:26.013873 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 00:01:26.022288 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 00:01:26.022983 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 00:01:26.023091 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 00:01:26.023118 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 00:01:26.026858 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 00:01:26.042717 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 00:01:26.042939 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 00:01:26.043017 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 00:01:26.047714 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 00:01:26.052390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 00:01:26.057886 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 00:01:26.061993 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 00:01:26.065598 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 00:01:26.067617 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 00:01:26.067686 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 00:01:26.072040 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 00:01:26.076279 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 00:01:26.083133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 00:01:26.083367 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 00:01:26.086439 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 00:01:26.087920 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 00:01:26.094061 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 00:01:26.096973 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 00:01:26.099276 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 00:01:26.101502 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 00:01:26.101630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 00:01:26.103507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 00:01:26.105295 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 00:01:26.105408 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 00:01:26.107141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 00:01:26.111160 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:01:26.112242 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:01:26.112293 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:01:26.112667 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:01:26.130715 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:01:26.144568 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:01:26.170476 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:01:26.193853 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:01:26.210008 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:01:26.218166 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:01:38.446326 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 00:01:38.446306678 +0000 UTC m=+12.465534159 I0407 00:01:39.192004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:01:39.192081 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 00:01:39.192072603 +0000 UTC m=+13.211300124 I0407 00:01:39.192026 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 00:01:39.192010031 +0000 UTC m=+13.211237542 I0407 00:01:39.209296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:01:39.209372 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 00:01:39.209362106 +0000 UTC m=+13.228589597 E0407 00:01:39.217965 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:01:39.218038 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 00:01:39.218029873 +0000 UTC m=+13.237257364 E0407 00:01:39.218061 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:01:39.228703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:01:39.228769 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 00:01:39.228761262 +0000 UTC m=+13.247988753 I0407 00:01:39.229137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f67fp" condition "Approved" to 2026-04-07 00:01:39.229126339 +0000 UTC m=+13.248353820 E0407 00:01:39.230380 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 00:01:39.230477 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:01:39.230503 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:01:39.230550 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 00:01:39.247431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f67fp" condition "Ready" to 2026-04-07 00:01:39.247419323 +0000 UTC m=+13.266646844 I0407 00:01:39.270593 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:01:39.270575597 +0000 UTC m=+13.289803108 I0407 00:01:39.289395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:01:39.290378 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:01:39.290364942 +0000 UTC m=+13.309592463 I0407 00:01:39.300287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:01:39.308608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:01:39.308917 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:01:39.30890644 +0000 UTC m=+13.328133931 I0407 00:01:39.310965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:01:44.230998 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:01:44.230960832 +0000 UTC m=+18.250188343 I0407 00:02:06.445324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:02:06.445356 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 00:02:06.445322418 +0000 UTC m=+40.464549899 I0407 00:02:06.445357 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 00:02:06.445349819 +0000 UTC m=+40.464577310 I0407 00:02:06.459232 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 00:02:06.459218594 +0000 UTC m=+40.478446085 I0407 00:02:06.490305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:02:06.490427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:02:06.497792 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 00:02:06.497776499 +0000 UTC m=+40.517003990 I0407 00:02:06.892615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wcbjf" condition "Approved" to 2026-04-07 00:02:06.892604338 +0000 UTC m=+40.911831829 I0407 00:02:06.927195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wcbjf" condition "Ready" to 2026-04-07 00:02:06.927181225 +0000 UTC m=+40.946408766 I0407 00:02:06.952147 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:02:06.952139488 +0000 UTC m=+40.971366969 I0407 00:02:06.973263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:06:30.756179 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-04-07 00:06:30.75615166 +0000 UTC m=+304.775379151 I0407 00:06:30.756628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:06:30.756648 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-04-07 00:06:30.756644078 +0000 UTC m=+304.775871569 I0407 00:06:30.775968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:06:30.776060 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:06:30.776090 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-04-07 00:06:30.77608193 +0000 UTC m=+304.795309441 I0407 00:06:30.888354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-wnlkl" condition "Approved" to 2026-04-07 00:06:30.888340154 +0000 UTC m=+304.907567645 I0407 00:06:30.921176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-wnlkl" condition "Ready" to 2026-04-07 00:06:30.921164802 +0000 UTC m=+304.940392293 I0407 00:06:30.948321 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:06:30.948311469 +0000 UTC m=+304.967538960 I0407 00:06:30.974138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:06:31.025562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:35.498232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:07:35.498282 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 00:07:35.498265472 +0000 UTC m=+369.517492983 I0407 00:07:35.498840 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 00:07:35.49882353 +0000 UTC m=+369.518051021 E0407 00:07:35.509531 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:07:35.509578 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 00:07:35.509569234 +0000 UTC m=+369.528796725 E0407 00:07:35.509635 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:07:35.511118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:35.511170 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 00:07:35.511164619 +0000 UTC m=+369.530392110 E0407 00:07:35.525240 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 00:07:35.525313 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:07:35.525340 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:07:35.525382 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 00:07:35.529690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:35.549066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hgsc2" condition "Approved" to 2026-04-07 00:07:35.549055638 +0000 UTC m=+369.568283129 I0407 00:07:35.563576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hgsc2" condition "Ready" to 2026-04-07 00:07:35.563565809 +0000 UTC m=+369.582793300 I0407 00:07:35.580685 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:35.580679162 +0000 UTC m=+369.599906643 I0407 00:07:35.594981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:35.595166 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:35.595160743 +0000 UTC m=+369.614388224 I0407 00:07:35.610264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:35.613148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:40.526699 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:40.526684384 +0000 UTC m=+374.545911895 I0407 00:08:20.456395 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 00:08:20.456332468 +0000 UTC m=+414.475559969 I0407 00:08:20.456990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:08:20.457024 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 00:08:20.457019488 +0000 UTC m=+414.476246979 I0407 00:08:20.467330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:08:20.467432 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 00:08:20.467420156 +0000 UTC m=+414.486647667 I0407 00:08:20.468171 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 00:08:20.468162956 +0000 UTC m=+414.487390467 I0407 00:08:20.473138 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 00:08:20.473130698 +0000 UTC m=+414.492358189 I0407 00:08:20.473558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:08:20.473580 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 00:08:20.473575564 +0000 UTC m=+414.492803055 I0407 00:08:20.505321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:20.505396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:08:20.505419 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 00:08:20.505411168 +0000 UTC m=+414.524638659 I0407 00:08:20.519294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:20.519357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:08:20.519375 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 00:08:20.519369366 +0000 UTC m=+414.538596857 I0407 00:08:20.520669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:20.520705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:08:20.520722 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 00:08:20.520718156 +0000 UTC m=+414.539945647 I0407 00:08:20.701124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ftg4b" condition "Approved" to 2026-04-07 00:08:20.701114407 +0000 UTC m=+414.720341898 I0407 00:08:20.720212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ftg4b" condition "Ready" to 2026-04-07 00:08:20.720199948 +0000 UTC m=+414.739427429 I0407 00:08:20.749021 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:08:20.749008419 +0000 UTC m=+414.768235910 I0407 00:08:20.787120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0407 00:08:20.942538 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-vdzv4\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0407 00:08:21.003213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nvs6g" condition "Approved" to 2026-04-07 00:08:21.003204012 +0000 UTC m=+415.022431503 I0407 00:08:21.003644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bppw6" condition "Approved" to 2026-04-07 00:08:21.003638809 +0000 UTC m=+415.022866300 I0407 00:08:21.042371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nvs6g" condition "Ready" to 2026-04-07 00:08:21.042361789 +0000 UTC m=+415.061589270 I0407 00:08:21.063645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bppw6" condition "Ready" to 2026-04-07 00:08:21.063637022 +0000 UTC m=+415.082864503 E0407 00:08:21.345998 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-jjn26\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" E0407 00:08:21.387045 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-89xhw\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0407 00:08:21.443117 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:08:21.443105984 +0000 UTC m=+415.462333465 I0407 00:08:21.596406 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:08:21.596392125 +0000 UTC m=+415.615619616 I0407 00:08:21.707498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:21.725313 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:08:21.72530307 +0000 UTC m=+415.744530551 I0407 00:08:21.791370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:21.791754 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:08:21.791747346 +0000 UTC m=+415.810974837 I0407 00:08:22.142929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:22.241127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:22.290670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:30.307601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:08:30.307871 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls" condition "Issuing" to 2026-04-07 00:08:30.307865771 +0000 UTC m=+424.327093292 I0407 00:08:30.307821 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls" condition "Ready" to 2026-04-07 00:08:30.30780883 +0000 UTC m=+424.327036351 I0407 00:08:30.323124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:30.323443 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls" condition "Ready" to 2026-04-07 00:08:30.323427109 +0000 UTC m=+424.342654610 I0407 00:08:30.818112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:30.852199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g4w9d-m66cj" condition "Approved" to 2026-04-07 00:08:30.852182188 +0000 UTC m=+424.871409679 I0407 00:08:30.878359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g4w9d-m66cj" condition "Ready" to 2026-04-07 00:08:30.878349086 +0000 UTC m=+424.897576567 I0407 00:08:30.943307 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:08:30.94329666 +0000 UTC m=+424.962524141 I0407 00:08:30.990093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:31.056041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g4w9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:45.091952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:08:45.092024 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 00:08:45.091994313 +0000 UTC m=+439.111221904 I0407 00:08:45.092656 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 00:08:45.092645252 +0000 UTC m=+439.111872783 I0407 00:08:45.128313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:45.128368 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 00:08:45.128362135 +0000 UTC m=+439.147589606 I0407 00:08:45.239740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:45.274795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-w5xjk" condition "Approved" to 2026-04-07 00:08:45.274784529 +0000 UTC m=+439.294012020 I0407 00:08:45.303193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-w5xjk" condition "Ready" to 2026-04-07 00:08:45.303181391 +0000 UTC m=+439.322408882 I0407 00:08:45.381325 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:08:45.381315721 +0000 UTC m=+439.400543202 I0407 00:08:45.399705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:45.399994 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:08:45.399986808 +0000 UTC m=+439.419214299 I0407 00:08:45.418137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:08:45.418547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:06.445547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:12:06.445641 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 00:12:06.445629584 +0000 UTC m=+640.464857095 I0407 00:12:06.446077 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 00:12:06.44606015 +0000 UTC m=+640.465287661 I0407 00:12:06.466058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:06.466144 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 00:12:06.466137665 +0000 UTC m=+640.485365136 I0407 00:12:06.722020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:06.760613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5mvgv" condition "Approved" to 2026-04-07 00:12:06.760601616 +0000 UTC m=+640.779829097 I0407 00:12:06.779935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5mvgv" condition "Ready" to 2026-04-07 00:12:06.779912392 +0000 UTC m=+640.799139873 I0407 00:12:06.809034 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:12:06.809024628 +0000 UTC m=+640.828252109 I0407 00:12:06.828713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:06.894069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:50.383702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:12:50.383782 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 00:12:50.383775336 +0000 UTC m=+684.403002827 I0407 00:12:50.383821 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 00:12:50.383808526 +0000 UTC m=+684.403036017 I0407 00:12:50.401530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:50.401653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:12:50.401712 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 00:12:50.401703243 +0000 UTC m=+684.420930734 I0407 00:12:50.580428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mq58b" condition "Approved" to 2026-04-07 00:12:50.580414897 +0000 UTC m=+684.599642408 I0407 00:12:50.602338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mq58b" condition "Ready" to 2026-04-07 00:12:50.602326802 +0000 UTC m=+684.621554293 I0407 00:12:50.634733 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:12:50.634719635 +0000 UTC m=+684.653947126 I0407 00:12:50.656255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:50.656499 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:12:50.656492229 +0000 UTC m=+684.675719720 I0407 00:12:50.662727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:50.680588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"