I0419 11:02:51.587367 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0419 11:02:51.587468 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0419 11:02:51.587558 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0419 11:02:51.593356 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0419 11:02:51.593922 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0419 11:02:51.593987 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0419 11:02:51.593993 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0419 11:02:51.597520 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0419 11:02:51.612745 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0419 11:02:51.615902 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0419 11:02:51.615923 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0419 11:02:51.616069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0419 11:02:51.619056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0419 11:02:51.625275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0419 11:02:51.627365 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0419 11:02:51.629140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0419 11:02:51.630800 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0419 11:02:51.630852 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0419 11:02:51.632723 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0419 11:02:51.634806 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0419 11:02:51.638755 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0419 11:02:51.642540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0419 11:02:51.646210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0419 11:02:51.649369 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0419 11:02:51.649494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0419 11:02:51.651235 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0419 11:02:51.651271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0419 11:02:51.653141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0419 11:02:51.654773 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0419 11:02:51.654965 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0419 11:02:51.656503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0419 11:02:51.658709 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0419 11:02:51.664933 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0419 11:02:51.668080 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:02:51.668853 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:02:51.669286 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:02:51.669366 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:02:51.669410 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:02:51.670081 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:02:51.670538 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:02:51.671335 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:02:51.687622 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:02:51.763308 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:03:01.587210 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-19 11:03:01.587197406 +0000 UTC m=+10.030160845 I0419 11:03:02.472728 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-19 11:03:02.472714443 +0000 UTC m=+10.915677902 I0419 11:03:02.472869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:03:02.472895 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-19 11:03:02.472889276 +0000 UTC m=+10.915852715 I0419 11:03:02.489593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:03:02.489738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:03:02.489785 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-19 11:03:02.489760809 +0000 UTC m=+10.932724248 E0419 11:03:02.489847 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 11:03:02.489924 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-19 11:03:02.489916342 +0000 UTC m=+10.932879781 E0419 11:03:02.489949 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 11:03:02.505851 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0419 11:03:02.505969 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 11:03:02.506007 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 11:03:02.506043 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0419 11:03:02.538124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-m6f9l" condition "Approved" to 2026-04-19 11:03:02.538112659 +0000 UTC m=+10.981076098 I0419 11:03:02.554920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-m6f9l" condition "Ready" to 2026-04-19 11:03:02.55490371 +0000 UTC m=+10.997867179 I0419 11:03:02.578527 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:03:02.578516259 +0000 UTC m=+11.021479688 I0419 11:03:02.595167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:03:02.595392 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:03:02.595386122 +0000 UTC m=+11.038349541 I0419 11:03:02.611299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:03:02.611579 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:03:02.611570803 +0000 UTC m=+11.054534242 I0419 11:03:07.507064 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:03:07.507050364 +0000 UTC m=+15.950013823 I0419 11:03:30.820836 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-19 11:03:30.820801372 +0000 UTC m=+39.263764811 I0419 11:03:30.821597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:03:30.822838 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-19 11:03:30.822822873 +0000 UTC m=+39.265786332 I0419 11:03:30.835099 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-19 11:03:30.835085526 +0000 UTC m=+39.278048965 I0419 11:03:30.852522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:03:30.852586 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-19 11:03:30.852580059 +0000 UTC m=+39.295543488 I0419 11:03:31.019261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:03:31.055513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gsc8d" condition "Approved" to 2026-04-19 11:03:31.055498486 +0000 UTC m=+39.498461935 I0419 11:03:31.167102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gsc8d" condition "Ready" to 2026-04-19 11:03:31.167092112 +0000 UTC m=+39.610055541 I0419 11:03:31.219794 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:03:31.219776862 +0000 UTC m=+39.662740301 I0419 11:03:31.258102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:03:31.259189 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:03:31.259177766 +0000 UTC m=+39.702141205 I0419 11:03:31.297992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:07:38.636810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-5.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:07:38.636852 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-5.nip.io-tls" condition "Issuing" to 2026-04-19 11:07:38.636842319 +0000 UTC m=+287.079805788 I0419 11:07:38.637722 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-5.nip.io-tls" condition "Ready" to 2026-04-19 11:07:38.63771302 +0000 UTC m=+287.080676479 I0419 11:07:38.658358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:07:38.658430 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-5.nip.io-tls" condition "Ready" to 2026-04-19 11:07:38.658423789 +0000 UTC m=+287.101387218 I0419 11:07:38.860605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:07:38.890543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-5.nip.io-tls-h8crm" condition "Approved" to 2026-04-19 11:07:38.890509614 +0000 UTC m=+287.333473043 I0419 11:07:38.917791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-5.nip.io-tls-h8crm" condition "Ready" to 2026-04-19 11:07:38.917781805 +0000 UTC m=+287.360745234 I0419 11:07:38.945932 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-5.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:07:38.945922216 +0000 UTC m=+287.388885655 I0419 11:07:38.973331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:07:39.027295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:43.441361 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-19 11:08:43.441346199 +0000 UTC m=+351.884309628 I0419 11:08:43.441663 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:08:43.441734 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-19 11:08:43.441722997 +0000 UTC m=+351.884686426 E0419 11:08:43.454215 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 11:08:43.454265 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-19 11:08:43.454253544 +0000 UTC m=+351.897216993 E0419 11:08:43.454331 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 11:08:43.459516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:43.459593 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-19 11:08:43.459582943 +0000 UTC m=+351.902546382 E0419 11:08:43.470673 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0419 11:08:43.471382 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 11:08:43.471408 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 11:08:43.471460 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0419 11:08:43.479888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:43.479980 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-19 11:08:43.479971412 +0000 UTC m=+351.922934851 I0419 11:08:43.482150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jw96d" condition "Approved" to 2026-04-19 11:08:43.482142456 +0000 UTC m=+351.925105895 I0419 11:08:43.494328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jw96d" condition "Ready" to 2026-04-19 11:08:43.494316427 +0000 UTC m=+351.937279866 I0419 11:08:43.513853 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:08:43.513838257 +0000 UTC m=+351.956801696 I0419 11:08:43.530152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:48.471864 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:08:48.471843044 +0000 UTC m=+356.914806513 I0419 11:09:28.596690 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-19 11:09:28.596679804 +0000 UTC m=+397.039643233 I0419 11:09:28.596957 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:09:28.597033 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-19 11:09:28.597026911 +0000 UTC m=+397.039990340 I0419 11:09:28.596840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:09:28.597428 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 11:09:28.597417298 +0000 UTC m=+397.040380747 I0419 11:09:28.597780 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-19 11:09:28.597776715 +0000 UTC m=+397.040740144 I0419 11:09:28.613519 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-19 11:09:28.613510879 +0000 UTC m=+397.056474308 I0419 11:09:28.617348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:09:28.621304 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-19 11:09:28.621290256 +0000 UTC m=+397.064253705 I0419 11:09:28.635552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:28.635613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:09:28.635634 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 11:09:28.635627984 +0000 UTC m=+397.078591423 I0419 11:09:28.640132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:28.640197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:09:28.640218 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-19 11:09:28.640212689 +0000 UTC m=+397.083176118 I0419 11:09:28.644895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:28.644986 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-19 11:09:28.644980459 +0000 UTC m=+397.087943888 I0419 11:09:28.764612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-h7bzd" condition "Approved" to 2026-04-19 11:09:28.764593838 +0000 UTC m=+397.207557277 I0419 11:09:28.792167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-h7bzd" condition "Ready" to 2026-04-19 11:09:28.792155544 +0000 UTC m=+397.235118973 I0419 11:09:28.820465 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:09:28.820455423 +0000 UTC m=+397.263418862 I0419 11:09:28.820772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:28.851356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:28.858191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7h9bz" condition "Approved" to 2026-04-19 11:09:28.858179349 +0000 UTC m=+397.301142788 I0419 11:09:28.890040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7h9bz" condition "Ready" to 2026-04-19 11:09:28.890023966 +0000 UTC m=+397.332987405 I0419 11:09:28.947325 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:09:28.947315578 +0000 UTC m=+397.390279007 I0419 11:09:28.990985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:28.991317 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:09:28.991310562 +0000 UTC m=+397.434274011 I0419 11:09:29.247991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:29.280511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:29.529192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:29.588059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xkfdc" condition "Approved" to 2026-04-19 11:09:29.588046922 +0000 UTC m=+398.031010361 I0419 11:09:29.689510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xkfdc" condition "Ready" to 2026-04-19 11:09:29.689501137 +0000 UTC m=+398.132464566 I0419 11:09:30.131227 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:09:30.131213267 +0000 UTC m=+398.574176706 I0419 11:09:30.231807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:30.529200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:36.470409 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8wnrb-tls" condition "Ready" to 2026-04-19 11:09:36.470397967 +0000 UTC m=+404.913361406 I0419 11:09:36.470875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8wnrb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:09:36.470892 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8wnrb-tls" condition "Issuing" to 2026-04-19 11:09:36.470887826 +0000 UTC m=+404.913851255 I0419 11:09:36.510256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8wnrb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8wnrb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:36.510392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8wnrb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:09:36.510440 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8wnrb-tls" condition "Issuing" to 2026-04-19 11:09:36.510435335 +0000 UTC m=+404.953398764 I0419 11:09:36.865383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8wnrb-65fp7" condition "Approved" to 2026-04-19 11:09:36.865366707 +0000 UTC m=+405.308330176 I0419 11:09:36.892667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8wnrb-65fp7" condition "Ready" to 2026-04-19 11:09:36.89264866 +0000 UTC m=+405.335612119 I0419 11:09:36.922633 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8wnrb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:09:36.922619163 +0000 UTC m=+405.365582602 I0419 11:09:36.956341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8wnrb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8wnrb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:50.870226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:09:50.870312 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-19 11:09:50.870304914 +0000 UTC m=+419.313268343 I0419 11:09:50.870254 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 11:09:50.870235683 +0000 UTC m=+419.313199132 I0419 11:09:50.893990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:50.894763 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 11:09:50.894751015 +0000 UTC m=+419.337714474 I0419 11:09:51.264463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:51.297550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dpg8s" condition "Approved" to 2026-04-19 11:09:51.297540063 +0000 UTC m=+419.740503502 I0419 11:09:51.319870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dpg8s" condition "Ready" to 2026-04-19 11:09:51.319859645 +0000 UTC m=+419.762823084 I0419 11:09:51.360835 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:09:51.360822703 +0000 UTC m=+419.803786132 I0419 11:09:51.373817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:51.374234 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:09:51.374223725 +0000 UTC m=+419.817187174 I0419 11:09:51.390523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:09:51.400825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:13:04.390649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:13:04.390684 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-19 11:13:04.390675208 +0000 UTC m=+612.833638647 I0419 11:13:04.390741 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-19 11:13:04.390726419 +0000 UTC m=+612.833689848 I0419 11:13:04.408692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:13:04.408773 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-19 11:13:04.408764033 +0000 UTC m=+612.851727472 I0419 11:13:04.814970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:13:04.845785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w5p8z" condition "Approved" to 2026-04-19 11:13:04.845774127 +0000 UTC m=+613.288737566 I0419 11:13:04.868931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w5p8z" condition "Ready" to 2026-04-19 11:13:04.86892078 +0000 UTC m=+613.311884219 I0419 11:13:04.892482 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:13:04.892470258 +0000 UTC m=+613.335433697 I0419 11:13:04.915142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:13:04.971557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:13:47.534524 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-19 11:13:47.534510247 +0000 UTC m=+655.977473676 I0419 11:13:47.534654 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:13:47.534709 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-19 11:13:47.53470303 +0000 UTC m=+655.977666449 I0419 11:13:47.552112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:13:47.552240 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-19 11:13:47.552230243 +0000 UTC m=+655.995193712 I0419 11:13:48.095508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:13:48.132481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-q7rnx" condition "Approved" to 2026-04-19 11:13:48.132471856 +0000 UTC m=+656.575435285 I0419 11:13:48.154153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-q7rnx" condition "Ready" to 2026-04-19 11:13:48.154140521 +0000 UTC m=+656.597103960 I0419 11:13:48.193019 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:13:48.193002174 +0000 UTC m=+656.635965643 I0419 11:13:48.220386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:13:48.221160 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:13:48.221149056 +0000 UTC m=+656.664112515 I0419 11:13:48.239657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:13:48.240225 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:13:48.240213382 +0000 UTC m=+656.683176841