I0413 14:25:47.995711 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0413 14:25:47.995991 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0413 14:25:47.996312 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0413 14:25:48.002691 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0413 14:25:48.003328 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0413 14:25:48.003448 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0413 14:25:48.003597 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0413 14:25:48.007734 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0413 14:25:48.026796 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0413 14:25:48.032678 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0413 14:25:48.036851 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0413 14:25:48.044007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0413 14:25:48.045973 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0413 14:25:48.046001 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0413 14:25:48.046035 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0413 14:25:48.048447 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0413 14:25:48.050651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0413 14:25:48.052232 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0413 14:25:48.052254 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0413 14:25:48.052295 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0413 14:25:48.054690 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0413 14:25:48.057540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0413 14:25:48.062618 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0413 14:25:48.065615 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0413 14:25:48.068192 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0413 14:25:48.071069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0413 14:25:48.073169 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0413 14:25:48.075114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0413 14:25:48.076961 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0413 14:25:48.078753 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0413 14:25:48.078787 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0413 14:25:48.078947 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0413 14:25:48.080733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0413 14:25:48.086496 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 14:25:48.088597 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 14:25:48.090633 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 14:25:48.098930 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 14:25:48.113685 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 14:25:48.139005 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 14:25:48.146662 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 14:25:48.163243 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 14:25:48.176275 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 14:25:48.179587 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 14:25:59.968434 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-13 14:25:59.968407731 +0000 UTC m=+12.003792572 I0413 14:26:00.888103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:26:00.888153 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 14:26:00.888144622 +0000 UTC m=+12.923529423 I0413 14:26:00.889084 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 14:26:00.889078865 +0000 UTC m=+12.924463666 E0413 14:26:00.907033 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 14:26:00.907258 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-13 14:26:00.907240619 +0000 UTC m=+12.942625460 E0413 14:26:00.907661 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 14:26:00.912361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:26:00.912460 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:26:00.912485 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 14:26:00.912477745 +0000 UTC m=+12.947862556 E0413 14:26:00.925761 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0413 14:26:00.926189 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 14:26:00.926235 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 14:26:00.926306 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0413 14:26:00.952508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:26:00.954882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5rft9" condition "Approved" to 2026-04-13 14:26:00.954859149 +0000 UTC m=+12.990243990 I0413 14:26:00.970078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5rft9" condition "Ready" to 2026-04-13 14:26:00.970059159 +0000 UTC m=+13.005444000 I0413 14:26:00.991486 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:26:00.991462589 +0000 UTC m=+13.026847430 I0413 14:26:01.012766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:26:05.926889 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:26:05.926873139 +0000 UTC m=+17.962257950 I0413 14:26:29.665943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:26:29.665997 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 14:26:29.665986292 +0000 UTC m=+41.701371103 I0413 14:26:29.666041 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 14:26:29.666017822 +0000 UTC m=+41.701402633 I0413 14:26:29.678349 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-13 14:26:29.678332234 +0000 UTC m=+41.713717035 I0413 14:26:29.707932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:26:29.708004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:26:29.708024 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 14:26:29.708019224 +0000 UTC m=+41.743404025 I0413 14:26:29.971221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4fqzz" condition "Approved" to 2026-04-13 14:26:29.971209724 +0000 UTC m=+42.006594525 I0413 14:26:30.016368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4fqzz" condition "Ready" to 2026-04-13 14:26:30.016350404 +0000 UTC m=+42.051735235 I0413 14:26:30.064193 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:26:30.064172716 +0000 UTC m=+42.099557517 I0413 14:26:30.099257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:30:52.694994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-150.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:30:52.695108 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-150.nip.io-tls" condition "Issuing" to 2026-04-13 14:30:52.69508558 +0000 UTC m=+304.730470381 I0413 14:30:52.695467 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-150.nip.io-tls" condition "Ready" to 2026-04-13 14:30:52.695461506 +0000 UTC m=+304.730846307 I0413 14:30:52.721801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-150.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-150.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:30:52.721898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-150.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:30:52.721926 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-150.nip.io-tls" condition "Issuing" to 2026-04-13 14:30:52.721915894 +0000 UTC m=+304.757300725 I0413 14:30:53.214286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-150.nip.io-tls-4tq4k" condition "Approved" to 2026-04-13 14:30:53.214272666 +0000 UTC m=+305.249657507 I0413 14:30:53.264843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-150.nip.io-tls-4tq4k" condition "Ready" to 2026-04-13 14:30:53.264819906 +0000 UTC m=+305.300204747 I0413 14:30:53.341626 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-150.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:30:53.341608258 +0000 UTC m=+305.376993059 I0413 14:30:53.430428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-150.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-150.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:31:58.970392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:31:58.970429 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 14:31:58.970420249 +0000 UTC m=+371.005805060 I0413 14:31:58.970547 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 14:31:58.970527401 +0000 UTC m=+371.005912232 I0413 14:31:58.982870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:31:58.983129 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 14:31:58.983034052 +0000 UTC m=+371.018418893 E0413 14:31:58.986755 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 14:31:58.986809 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-13 14:31:58.98679917 +0000 UTC m=+371.022184011 E0413 14:31:58.988234 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 14:31:59.000797 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0413 14:31:59.000933 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 14:31:59.001021 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 14:31:59.001099 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0413 14:31:59.002751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:31:59.020882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4666n" condition "Approved" to 2026-04-13 14:31:59.020870851 +0000 UTC m=+371.056255662 I0413 14:31:59.031642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4666n" condition "Ready" to 2026-04-13 14:31:59.031632486 +0000 UTC m=+371.067017297 I0413 14:31:59.062309 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:31:59.062283824 +0000 UTC m=+371.097668665 I0413 14:31:59.081118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:31:59.081476 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:31:59.081466177 +0000 UTC m=+371.116850988 I0413 14:31:59.099304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:04.001730 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:32:04.001712747 +0000 UTC m=+376.037097578 I0413 14:32:43.960821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:32:43.960882 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 14:32:43.960874871 +0000 UTC m=+415.996259682 I0413 14:32:43.961193 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 14:32:43.961188125 +0000 UTC m=+415.996572936 I0413 14:32:43.961489 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 14:32:43.961484599 +0000 UTC m=+415.996869410 I0413 14:32:43.961799 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:32:43.961820 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 14:32:43.961816354 +0000 UTC m=+415.997201165 I0413 14:32:43.969741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:32:43.969800 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 14:32:43.969793845 +0000 UTC m=+416.005178656 I0413 14:32:43.970039 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 14:32:43.970033409 +0000 UTC m=+416.005418220 I0413 14:32:44.002744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:44.002802 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 14:32:44.002795786 +0000 UTC m=+416.038180617 I0413 14:32:44.015647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:44.015710 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 14:32:44.015704246 +0000 UTC m=+416.051089047 I0413 14:32:44.022854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:44.022924 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 14:32:44.022917116 +0000 UTC m=+416.058301917 I0413 14:32:44.219463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:44.237734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:44.247088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j7nwg" condition "Approved" to 2026-04-13 14:32:44.247078804 +0000 UTC m=+416.282463615 I0413 14:32:44.274449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j7nwg" condition "Ready" to 2026-04-13 14:32:44.274440746 +0000 UTC m=+416.309825547 I0413 14:32:44.312305 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:32:44.312296813 +0000 UTC m=+416.347681614 I0413 14:32:44.342974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:44.466763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:44.530660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zwfx4" condition "Approved" to 2026-04-13 14:32:44.53064619 +0000 UTC m=+416.566030991 I0413 14:32:44.557675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zwfx4" condition "Ready" to 2026-04-13 14:32:44.557665386 +0000 UTC m=+416.593050177 I0413 14:32:44.593424 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:32:44.593413884 +0000 UTC m=+416.628798675 I0413 14:32:44.690083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:44.994300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8vpqf" condition "Approved" to 2026-04-13 14:32:44.994287801 +0000 UTC m=+417.029672602 I0413 14:32:45.402925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8vpqf" condition "Ready" to 2026-04-13 14:32:45.402914537 +0000 UTC m=+417.438299348 E0413 14:32:45.784769 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-f4vnt\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0413 14:32:45.838512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:45.995265 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-8vpqf" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-4zgm9" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0413 14:32:46.048113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dnqwh" condition "Approved" to 2026-04-13 14:32:46.048089017 +0000 UTC m=+418.083473858 I0413 14:32:46.401811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dnqwh" condition "Ready" to 2026-04-13 14:32:46.401798461 +0000 UTC m=+418.437183282 I0413 14:32:46.607870 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:32:46.607854477 +0000 UTC m=+418.643239348 I0413 14:32:46.690305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:46.690630 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:32:46.690621725 +0000 UTC m=+418.726006536 I0413 14:32:46.937935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:46.991825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:49.931582 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls" condition "Ready" to 2026-04-13 14:32:49.931559663 +0000 UTC m=+421.966944494 I0413 14:32:49.931923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:32:49.932020 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls" condition "Issuing" to 2026-04-13 14:32:49.93199672 +0000 UTC m=+421.967381531 I0413 14:32:49.958877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:49.959237 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls" condition "Ready" to 2026-04-13 14:32:49.959222395 +0000 UTC m=+421.994607206 I0413 14:32:50.200511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:50.232647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7qfcx-4ml4k" condition "Approved" to 2026-04-13 14:32:50.23263402 +0000 UTC m=+422.268018851 I0413 14:32:50.253793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7qfcx-4ml4k" condition "Ready" to 2026-04-13 14:32:50.253774261 +0000 UTC m=+422.289159112 I0413 14:32:50.294545 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:32:50.294527492 +0000 UTC m=+422.329912303 I0413 14:32:50.315196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:32:50.315510 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:32:50.315500711 +0000 UTC m=+422.350885522 I0413 14:32:50.343765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qfcx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:33:05.295389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:33:05.295419 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 14:33:05.29541206 +0000 UTC m=+437.330796881 I0413 14:33:05.295791 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 14:33:05.295785445 +0000 UTC m=+437.331170256 I0413 14:33:05.323863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:33:05.323935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:33:05.323949 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 14:33:05.323944103 +0000 UTC m=+437.359328914 I0413 14:33:05.502709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:33:05.512062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sb9fs" condition "Approved" to 2026-04-13 14:33:05.512053418 +0000 UTC m=+437.547438229 I0413 14:33:05.535215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sb9fs" condition "Ready" to 2026-04-13 14:33:05.535202069 +0000 UTC m=+437.570586880 I0413 14:33:05.573254 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:33:05.5732414 +0000 UTC m=+437.608626211 I0413 14:33:05.587842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:33:05.588282 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:33:05.588271831 +0000 UTC m=+437.623656652 I0413 14:33:05.616401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:36:20.621671 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 14:36:20.621657583 +0000 UTC m=+632.657042434 I0413 14:36:20.621764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:36:20.621974 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 14:36:20.621965357 +0000 UTC m=+632.657350178 I0413 14:36:20.641449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:36:20.641516 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 14:36:20.641508917 +0000 UTC m=+632.676893718 I0413 14:36:21.020678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:36:21.053028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5h6kw" condition "Approved" to 2026-04-13 14:36:21.05302 +0000 UTC m=+633.088404801 I0413 14:36:21.072576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5h6kw" condition "Ready" to 2026-04-13 14:36:21.07256454 +0000 UTC m=+633.107949351 I0413 14:36:21.107807 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:36:21.107780537 +0000 UTC m=+633.143165358 I0413 14:36:21.141564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:36:21.141898 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:36:21.141891442 +0000 UTC m=+633.177276253 I0413 14:36:21.152066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:36:21.163104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:36:21.163354 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:36:21.163347243 +0000 UTC m=+633.198732034 I0413 14:37:01.900219 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:37:01.900263 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-13 14:37:01.90025703 +0000 UTC m=+673.935641841 I0413 14:37:01.900575 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-13 14:37:01.900569723 +0000 UTC m=+673.935954534 I0413 14:37:01.916591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:37:01.916666 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 14:37:01.916681 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-13 14:37:01.916675943 +0000 UTC m=+673.952060764 I0413 14:37:02.324768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:37:02.333900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-spj4c" condition "Approved" to 2026-04-13 14:37:02.33385284 +0000 UTC m=+674.369237681 I0413 14:37:02.357003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-spj4c" condition "Ready" to 2026-04-13 14:37:02.356995627 +0000 UTC m=+674.392380428 I0413 14:37:02.385201 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:37:02.385193451 +0000 UTC m=+674.420578252 I0413 14:37:02.402914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:37:02.403215 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:37:02.403209522 +0000 UTC m=+674.438594323 I0413 14:37:02.424443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 14:37:02.424746 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 14:37:02.42473977 +0000 UTC m=+674.460124581