I0430 14:25:05.346955 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0430 14:25:05.347213 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0430 14:25:05.347337 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0430 14:25:05.353156 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0430 14:25:05.353748 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0430 14:25:05.353768 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0430 14:25:05.353817 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0430 14:25:05.357694 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0430 14:25:05.375782 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0430 14:25:05.381372 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0430 14:25:05.389547 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0430 14:25:05.394065 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0430 14:25:05.396617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0430 14:25:05.398852 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0430 14:25:05.398960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0430 14:25:05.401027 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0430 14:25:05.402849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0430 14:25:05.408103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0430 14:25:05.411197 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0430 14:25:05.411232 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0430 14:25:05.411233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0430 14:25:05.414171 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0430 14:25:05.417819 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0430 14:25:05.422084 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0430 14:25:05.427504 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0430 14:25:05.430759 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0430 14:25:05.430796 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0430 14:25:05.430804 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0430 14:25:05.430874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0430 14:25:05.434572 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0430 14:25:05.440936 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0430 14:25:05.444406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0430 14:25:05.447708 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0430 14:25:05.450146 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0430 14:25:05.450856 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0430 14:25:05.451474 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0430 14:25:05.451830 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0430 14:25:05.471491 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0430 14:25:05.485421 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0430 14:25:05.496628 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0430 14:25:05.509895 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0430 14:25:05.523811 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0430 14:25:05.536584 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0430 14:25:21.348127 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-30 14:25:21.348109713 +0000 UTC m=+16.037752522 I0430 14:25:22.067628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:25:22.067666 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-30 14:25:22.067659028 +0000 UTC m=+16.757301817 I0430 14:25:22.068264 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-30 14:25:22.068243819 +0000 UTC m=+16.757886628 E0430 14:25:22.083621 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0430 14:25:22.083692 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-30 14:25:22.083684518 +0000 UTC m=+16.773327307 E0430 14:25:22.083721 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0430 14:25:22.084091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:25:22.084189 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-30 14:25:22.084181666 +0000 UTC m=+16.773824445 E0430 14:25:22.102296 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0430 14:25:22.102379 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0430 14:25:22.102405 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0430 14:25:22.102431 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0430 14:25:22.105038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:25:22.125862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5tj2d" condition "Approved" to 2026-04-30 14:25:22.125852331 +0000 UTC m=+16.815495110 I0430 14:25:22.138744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5tj2d" condition "Ready" to 2026-04-30 14:25:22.138729571 +0000 UTC m=+16.828372370 I0430 14:25:22.165676 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:25:22.165660651 +0000 UTC m=+16.855303440 I0430 14:25:22.185877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:25:22.186256 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:25:22.186247584 +0000 UTC m=+16.875890363 I0430 14:25:22.200744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:25:22.201122 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:25:22.201113044 +0000 UTC m=+16.890755823 I0430 14:25:27.103466 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:25:27.103452133 +0000 UTC m=+21.793094922 I0430 14:25:49.515449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:25:49.515491 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-30 14:25:49.515481495 +0000 UTC m=+44.205124274 I0430 14:25:49.515775 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-30 14:25:49.515771395 +0000 UTC m=+44.205414174 I0430 14:25:49.540992 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-30 14:25:49.540982639 +0000 UTC m=+44.230625408 I0430 14:25:49.587681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:25:49.587740 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-30 14:25:49.587733597 +0000 UTC m=+44.277376386 I0430 14:25:49.764471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:25:49.795954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5pkjm" condition "Approved" to 2026-04-30 14:25:49.795942956 +0000 UTC m=+44.485585745 I0430 14:25:49.834238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5pkjm" condition "Ready" to 2026-04-30 14:25:49.834225331 +0000 UTC m=+44.523868140 I0430 14:25:49.873805 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:25:49.873794928 +0000 UTC m=+44.563437707 I0430 14:25:49.896513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:29:56.565790 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready" to 2026-04-30 14:29:56.56573677 +0000 UTC m=+291.255379579 I0430 14:29:56.567367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:29:56.567568 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Issuing" to 2026-04-30 14:29:56.56740942 +0000 UTC m=+291.257052229 I0430 14:29:56.585375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:29:56.585440 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready" to 2026-04-30 14:29:56.58543186 +0000 UTC m=+291.275074649 I0430 14:29:57.040877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:29:57.071102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-33.nip.io-tls-ckqfq" condition "Approved" to 2026-04-30 14:29:57.071088158 +0000 UTC m=+291.760730947 I0430 14:29:57.097076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-33.nip.io-tls-ckqfq" condition "Ready" to 2026-04-30 14:29:57.097067019 +0000 UTC m=+291.786709808 I0430 14:29:57.127507 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:29:57.127441166 +0000 UTC m=+291.817083975 I0430 14:29:57.151092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:01.196965 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-30 14:31:01.196922947 +0000 UTC m=+355.886565736 I0430 14:31:01.197022 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:31:01.197059 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-30 14:31:01.1970481 +0000 UTC m=+355.886690919 E0430 14:31:01.256543 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0430 14:31:01.256610 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-30 14:31:01.256597365 +0000 UTC m=+355.946240184 E0430 14:31:01.256835 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0430 14:31:01.260455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:01.260627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:31:01.260672 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-30 14:31:01.260660174 +0000 UTC m=+355.950302993 E0430 14:31:01.269560 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0430 14:31:01.269680 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0430 14:31:01.269736 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0430 14:31:01.269781 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0430 14:31:01.336784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nmfsd" condition "Approved" to 2026-04-30 14:31:01.336769295 +0000 UTC m=+356.026412104 I0430 14:31:01.375044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nmfsd" condition "Ready" to 2026-04-30 14:31:01.375030755 +0000 UTC m=+356.064673564 I0430 14:31:01.410796 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:31:01.410777424 +0000 UTC m=+356.100420233 I0430 14:31:01.432579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:01.432843 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:31:01.432835595 +0000 UTC m=+356.122478374 I0430 14:31:01.448937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:01.449138 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:31:01.449133246 +0000 UTC m=+356.138776035 I0430 14:31:06.270198 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:31:06.270186854 +0000 UTC m=+360.959829643 I0430 14:31:46.171347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:31:46.171506 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-30 14:31:46.17150168 +0000 UTC m=+400.861144459 I0430 14:31:46.184821 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-30 14:31:46.18480943 +0000 UTC m=+400.874452209 I0430 14:31:46.184854 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:31:46.184879 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-30 14:31:46.184873242 +0000 UTC m=+400.874516021 I0430 14:31:46.186073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:31:46.186110 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-30 14:31:46.186107273 +0000 UTC m=+400.875750052 I0430 14:31:46.189820 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-30 14:31:46.189814255 +0000 UTC m=+400.879457294 I0430 14:31:46.171416 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-30 14:31:46.171393357 +0000 UTC m=+400.861036136 I0430 14:31:46.238596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:46.238645 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-30 14:31:46.23863981 +0000 UTC m=+400.928282589 I0430 14:31:46.242756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:46.242844 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-30 14:31:46.242834824 +0000 UTC m=+400.932477603 I0430 14:31:46.247201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:46.247272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:31:46.247285 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-30 14:31:46.247281765 +0000 UTC m=+400.936924544 I0430 14:31:46.359254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:46.391377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tmtqb" condition "Approved" to 2026-04-30 14:31:46.391366009 +0000 UTC m=+401.081008808 I0430 14:31:46.411691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tmtqb" condition "Ready" to 2026-04-30 14:31:46.411680365 +0000 UTC m=+401.101323154 I0430 14:31:46.420692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:46.441474 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:31:46.441464166 +0000 UTC m=+401.131106945 I0430 14:31:46.444240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wb7xv" condition "Approved" to 2026-04-30 14:31:46.444232375 +0000 UTC m=+401.133875144 I0430 14:31:46.471403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9q284" condition "Approved" to 2026-04-30 14:31:46.471391831 +0000 UTC m=+401.161034620 I0430 14:31:46.473903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wb7xv" condition "Ready" to 2026-04-30 14:31:46.473893554 +0000 UTC m=+401.163536353 I0430 14:31:46.479165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:46.557659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9q284" condition "Ready" to 2026-04-30 14:31:46.557646237 +0000 UTC m=+401.247289036 I0430 14:31:46.906857 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:31:46.906821844 +0000 UTC m=+401.596464633 I0430 14:31:47.143587 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:31:47.143568996 +0000 UTC m=+401.833211785 I0430 14:31:47.198868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:47.199344 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:31:47.199335694 +0000 UTC m=+401.888978513 I0430 14:31:47.398281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:47.398582 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:31:47.398575382 +0000 UTC m=+402.088218171 I0430 14:31:47.749315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:31:47.851857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:32:01.783413 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" condition "Ready" to 2026-04-30 14:32:01.783386187 +0000 UTC m=+416.473028976 I0430 14:32:01.783473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:32:01.783781 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" condition "Issuing" to 2026-04-30 14:32:01.783771417 +0000 UTC m=+416.473414206 I0430 14:32:01.796393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g99fn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:32:01.796482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:32:01.796507 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" condition "Issuing" to 2026-04-30 14:32:01.796499964 +0000 UTC m=+416.486142743 I0430 14:32:02.070548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g99fn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:32:02.078484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g99fn-hrm2p" condition "Approved" to 2026-04-30 14:32:02.078474393 +0000 UTC m=+416.768117182 I0430 14:32:02.103145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g99fn-hrm2p" condition "Ready" to 2026-04-30 14:32:02.103134579 +0000 UTC m=+416.792777368 I0430 14:32:02.136457 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:32:02.1364454 +0000 UTC m=+416.826088179 I0430 14:32:02.163623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g99fn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:32:02.163835 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:32:02.163829193 +0000 UTC m=+416.853471972 I0430 14:32:02.190196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g99fn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:32:02.190577 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:32:02.190566741 +0000 UTC m=+416.880209530 I0430 14:32:02.194221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g99fn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g99fn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:32:18.621628 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-30 14:32:18.621580126 +0000 UTC m=+433.311222905 I0430 14:32:18.622586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:32:18.622677 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-30 14:32:18.622671454 +0000 UTC m=+433.312314243 I0430 14:32:18.651318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:32:18.651418 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-30 14:32:18.651411543 +0000 UTC m=+433.341054322 I0430 14:32:18.805260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:32:18.840902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gxxfn" condition "Approved" to 2026-04-30 14:32:18.840888998 +0000 UTC m=+433.530531777 I0430 14:32:18.860491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gxxfn" condition "Ready" to 2026-04-30 14:32:18.860481508 +0000 UTC m=+433.550124287 I0430 14:32:18.911907 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:32:18.911892625 +0000 UTC m=+433.601535414 I0430 14:32:18.935227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:32:18.935635 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:32:18.935627229 +0000 UTC m=+433.625270018 I0430 14:32:18.939148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:32:18.953796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:35:33.935968 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-30 14:35:33.935949769 +0000 UTC m=+628.625592578 I0430 14:35:33.936328 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:35:33.936387 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-30 14:35:33.93638006 +0000 UTC m=+628.626022849 I0430 14:35:33.955030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:35:33.955129 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-30 14:35:33.955121078 +0000 UTC m=+628.644763857 I0430 14:35:34.108741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:35:34.140450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z8xm9" condition "Approved" to 2026-04-30 14:35:34.14044158 +0000 UTC m=+628.830084359 I0430 14:35:34.168383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z8xm9" condition "Ready" to 2026-04-30 14:35:34.168373931 +0000 UTC m=+628.858016720 I0430 14:35:34.198794 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:35:34.198784866 +0000 UTC m=+628.888427645 I0430 14:35:34.226329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:35:34.272396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:36:20.258097 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-30 14:36:20.258084352 +0000 UTC m=+674.947727141 I0430 14:36:20.258203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:36:20.258233 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-30 14:36:20.258226345 +0000 UTC m=+674.947869124 I0430 14:36:20.276153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:36:20.276208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0430 14:36:20.276219 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-30 14:36:20.276214524 +0000 UTC m=+674.965857293 I0430 14:36:20.426224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wcn96" condition "Approved" to 2026-04-30 14:36:20.426211781 +0000 UTC m=+675.115854570 I0430 14:36:20.452904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wcn96" condition "Ready" to 2026-04-30 14:36:20.452893792 +0000 UTC m=+675.142536581 I0430 14:36:20.483162 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:36:20.483145063 +0000 UTC m=+675.172787882 I0430 14:36:20.499913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0430 14:36:20.500271 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 14:36:20.50026401 +0000 UTC m=+675.189906799 I0430 14:36:20.527790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"