I0427 04:56:26.467468 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 04:56:26.467594 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 04:56:26.467673 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 04:56:26.471398 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 04:56:26.471783 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 04:56:26.471806 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 04:56:26.471897 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 04:56:26.474523 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 04:56:26.489535 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 04:56:26.494058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 04:56:26.498560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 04:56:26.501568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 04:56:26.504056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 04:56:26.505894 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 04:56:26.507699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 04:56:26.509571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 04:56:26.512628 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 04:56:26.512661 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 04:56:26.512821 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 04:56:26.512944 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 04:56:26.515759 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 04:56:26.517665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 04:56:26.519631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 04:56:26.521426 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 04:56:26.521472 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 04:56:26.521492 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 04:56:26.521537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 04:56:26.523418 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 04:56:26.525510 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 04:56:26.527291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 04:56:26.529066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 04:56:26.532769 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 04:56:26.535145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 04:56:26.537134 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 04:56:26.537316 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 04:56:26.537643 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 04:56:26.562050 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 04:56:26.573714 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 04:56:26.597536 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 04:56:26.607477 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 04:56:26.633882 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 04:56:26.636036 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 04:56:26.646662 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 04:56:43.051569 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 04:56:43.051549557 +0000 UTC m=+16.619660601 I0427 04:56:43.835292 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 04:56:43.835280024 +0000 UTC m=+17.403391088 I0427 04:56:43.835830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 04:56:43.835903 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 04:56:43.835894403 +0000 UTC m=+17.404005467 I0427 04:56:43.882904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:43.883018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 04:56:43.883061 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 04:56:43.883050519 +0000 UTC m=+17.451161613 E0427 04:56:43.917176 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 04:56:43.917237 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 04:56:43.917230439 +0000 UTC m=+17.485341503 E0427 04:56:43.917310 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 04:56:43.972181 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 04:56:43.973255 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 04:56:43.974502 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 04:56:43.974635 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 04:56:44.069761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:44.071115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ldmz4" condition "Approved" to 2026-04-27 04:56:44.07110475 +0000 UTC m=+17.639215844 I0427 04:56:44.095804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ldmz4" condition "Ready" to 2026-04-27 04:56:44.095792692 +0000 UTC m=+17.663903756 I0427 04:56:44.139894 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:44.139880931 +0000 UTC m=+17.707992015 I0427 04:56:44.155297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:44.155674 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:44.155668406 +0000 UTC m=+17.723779450 I0427 04:56:44.178035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:48.973058 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:48.973038429 +0000 UTC m=+22.541149523 I0427 04:56:49.408113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 04:56:49.408224 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 04:56:49.408218152 +0000 UTC m=+22.976329216 I0427 04:56:49.408148 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 04:56:49.408140331 +0000 UTC m=+22.976251385 I0427 04:56:49.423628 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 04:56:49.423616576 +0000 UTC m=+22.991727640 I0427 04:56:49.428201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:49.428275 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 04:56:49.428301 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 04:56:49.428295321 +0000 UTC m=+22.996406395 I0427 04:56:49.706368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:49.737074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sqjk5" condition "Approved" to 2026-04-27 04:56:49.737063152 +0000 UTC m=+23.305174226 I0427 04:56:49.783191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sqjk5" condition "Ready" to 2026-04-27 04:56:49.783178384 +0000 UTC m=+23.351289448 I0427 04:56:49.827535 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:49.827520421 +0000 UTC m=+23.395631485 I0427 04:56:49.859678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:49.860114 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:49.860104375 +0000 UTC m=+23.428215439 I0427 04:56:49.898746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:53.292800 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-27 04:56:53.292785084 +0000 UTC m=+26.860896138 I0427 04:56:53.292929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 04:56:53.292942 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-27 04:56:53.292939456 +0000 UTC m=+26.861050510 E0427 04:56:53.305439 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 04:56:53.305471 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-27 04:56:53.305464858 +0000 UTC m=+26.873575922 I0427 04:56:53.305506 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 04:56:53.313891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:53.313940 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-27 04:56:53.313936804 +0000 UTC m=+26.882047858 E0427 04:56:53.323076 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0427 04:56:53.323128 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-27 04:56:53.323112149 +0000 UTC m=+26.891223213 E0427 04:56:53.323177 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 04:56:53.323201 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 04:56:53.323228 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0427 04:56:53.323628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 04:56:53.323651 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-27 04:56:53.323646406 +0000 UTC m=+26.891757470 I0427 04:56:53.366977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:53.367296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 04:56:53.367387 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-27 04:56:53.367317414 +0000 UTC m=+26.935428488 I0427 04:56:53.690213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-xj9sd" condition "Approved" to 2026-04-27 04:56:53.690199699 +0000 UTC m=+27.258310763 I0427 04:56:53.710330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-xj9sd" condition "Ready" to 2026-04-27 04:56:53.710322124 +0000 UTC m=+27.278433178 I0427 04:56:53.891830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:53.919553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6r76w" condition "Approved" to 2026-04-27 04:56:53.919536085 +0000 UTC m=+27.487647179 I0427 04:56:53.951199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6r76w" condition "Ready" to 2026-04-27 04:56:53.951188547 +0000 UTC m=+27.519299611 I0427 04:56:53.980428 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:53.980417577 +0000 UTC m=+27.548528631 I0427 04:56:54.000564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:54.001003 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:54.000991408 +0000 UTC m=+27.569102482 I0427 04:56:54.030128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:58.325616 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:58.32560389 +0000 UTC m=+31.893714974 I0427 04:56:58.340405 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-xj9sd" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:58.340390758 +0000 UTC m=+31.908501822 I0427 04:56:58.371712 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:58.371699797 +0000 UTC m=+31.939810851 I0427 04:56:58.450450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 04:56:58.450927 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 04:56:58.450904187 +0000 UTC m=+32.019015251 I0427 04:56:58.481426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:02:09.897543 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-04-27 05:02:09.89752248 +0000 UTC m=+343.465633544 I0427 05:02:09.897915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:02:09.897929 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-04-27 05:02:09.897925058 +0000 UTC m=+343.466036112 I0427 05:02:09.911112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:02:09.911158 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-04-27 05:02:09.91115421 +0000 UTC m=+343.479265254 I0427 05:02:10.221011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:02:10.246972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-q998w" condition "Approved" to 2026-04-27 05:02:10.24695608 +0000 UTC m=+343.815067134 I0427 05:02:10.267506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-q998w" condition "Ready" to 2026-04-27 05:02:10.267492021 +0000 UTC m=+343.835603115 I0427 05:02:10.291519 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:02:10.291507843 +0000 UTC m=+343.859618907 I0427 05:02:10.320172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:02:10.320473 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:02:10.320466415 +0000 UTC m=+343.888577459 I0427 05:02:10.338700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:05:54.357852 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 05:05:54.357821175 +0000 UTC m=+567.925932229 I0427 05:05:54.358196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:05:54.358256 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 05:05:54.358248331 +0000 UTC m=+567.926359395 I0427 05:05:54.376547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:05:54.376634 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 05:05:54.376624651 +0000 UTC m=+567.944735725 I0427 05:05:54.943684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:05:54.972932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2vfgs" condition "Approved" to 2026-04-27 05:05:54.972916013 +0000 UTC m=+568.541027107 I0427 05:05:54.992150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2vfgs" condition "Ready" to 2026-04-27 05:05:54.992129185 +0000 UTC m=+568.560240279 I0427 05:05:55.025096 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:05:55.025082808 +0000 UTC m=+568.593193892 I0427 05:05:55.051954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:05:55.052982 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:05:55.052973377 +0000 UTC m=+568.621084431 I0427 05:05:55.058993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:05:55.064360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:05:55.064640 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:05:55.064634417 +0000 UTC m=+568.632745481 I0427 05:06:41.737114 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:06:41.737270 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 05:06:41.7372571 +0000 UTC m=+615.305368174 I0427 05:06:41.737259 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 05:06:41.737241529 +0000 UTC m=+615.305352593 I0427 05:06:41.754734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:06:41.754780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:06:41.754792 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 05:06:41.7547871 +0000 UTC m=+615.322898154 I0427 05:06:41.941869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:06:41.946600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vq7j6" condition "Approved" to 2026-04-27 05:06:41.94658366 +0000 UTC m=+615.514694754 I0427 05:06:41.964113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vq7j6" condition "Ready" to 2026-04-27 05:06:41.964093 +0000 UTC m=+615.532204054 I0427 05:06:41.988728 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:06:41.988719411 +0000 UTC m=+615.556830475 I0427 05:06:42.005838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:06:42.006417 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:06:42.006395954 +0000 UTC m=+615.574507018 I0427 05:06:42.020322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:05.682121 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 05:07:05.682085611 +0000 UTC m=+639.250196675 I0427 05:07:05.682703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:07:05.682754 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 05:07:05.68273864 +0000 UTC m=+639.250849714 I0427 05:07:05.699617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:05.699848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:07:05.699929 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 05:07:05.699921923 +0000 UTC m=+639.268032987 E0427 05:07:05.715202 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 05:07:05.717319 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 05:07:05.717306919 +0000 UTC m=+639.285417983 E0427 05:07:05.717464 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 05:07:05.735719 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0427 05:07:05.737344 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 05:07:05.737391 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 05:07:05.737449 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 05:07:05.744246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qs57x" condition "Approved" to 2026-04-27 05:07:05.74423306 +0000 UTC m=+639.312344124 I0427 05:07:05.759285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qs57x" condition "Ready" to 2026-04-27 05:07:05.759276953 +0000 UTC m=+639.327388007 I0427 05:07:05.777148 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:05.777139095 +0000 UTC m=+639.345250139 I0427 05:07:05.792628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:05.792832 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:05.792825007 +0000 UTC m=+639.360936051 I0427 05:07:05.802347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:05.811776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:05.811989 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:05.811982378 +0000 UTC m=+639.380093432 I0427 05:07:10.736627 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:10.736608335 +0000 UTC m=+644.304719419 I0427 05:07:49.939470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:07:49.939494 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 05:07:49.939489489 +0000 UTC m=+683.507600543 I0427 05:07:49.939502 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 05:07:49.939488189 +0000 UTC m=+683.507599263 I0427 05:07:49.978949 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:07:49.979074 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 05:07:49.979065073 +0000 UTC m=+683.547176127 I0427 05:07:49.993537 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 05:07:49.993522757 +0000 UTC m=+683.561633811 I0427 05:07:49.984882 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 05:07:49.984867532 +0000 UTC m=+683.552978596 I0427 05:07:49.984950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:07:49.994073 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 05:07:49.994068346 +0000 UTC m=+683.562179390 I0427 05:07:49.985447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:49.994271 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 05:07:49.994267782 +0000 UTC m=+683.562378836 I0427 05:07:50.039423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:50.039508 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 05:07:50.039496157 +0000 UTC m=+683.607607241 I0427 05:07:50.040687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:50.040755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:07:50.040784 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 05:07:50.040777291 +0000 UTC m=+683.608888385 I0427 05:07:50.138981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:50.233662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-v2t6l" condition "Approved" to 2026-04-27 05:07:50.233651016 +0000 UTC m=+683.801762070 I0427 05:07:50.254270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-v2t6l" condition "Ready" to 2026-04-27 05:07:50.25426058 +0000 UTC m=+683.822371634 I0427 05:07:50.318702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:07:50.318744 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 05:07:50.318737261 +0000 UTC m=+683.886848315 I0427 05:07:50.330620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:50.335397 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:50.335387729 +0000 UTC m=+683.903498783 I0427 05:07:50.354277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:50.362620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:50.362825 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:50.362820056 +0000 UTC m=+683.930931100 I0427 05:07:50.385645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fb7b8" condition "Approved" to 2026-04-27 05:07:50.385627815 +0000 UTC m=+683.953738869 I0427 05:07:50.400676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fb7b8" condition "Ready" to 2026-04-27 05:07:50.400666318 +0000 UTC m=+683.968777382 I0427 05:07:50.641903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:51.038344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lwlb9" condition "Approved" to 2026-04-27 05:07:51.038322796 +0000 UTC m=+684.606433890 I0427 05:07:51.139780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4p94d" condition "Approved" to 2026-04-27 05:07:51.139765222 +0000 UTC m=+684.707876286 I0427 05:07:51.242567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lwlb9" condition "Ready" to 2026-04-27 05:07:51.242558534 +0000 UTC m=+684.810669588 I0427 05:07:51.612646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4p94d" condition "Ready" to 2026-04-27 05:07:51.612633862 +0000 UTC m=+685.180744926 I0427 05:07:51.733104 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-lwlb9" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-ktzs6" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0427 05:07:52.335475 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:52.335462705 +0000 UTC m=+685.903573769 I0427 05:07:52.389198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-l57pb" condition "Approved" to 2026-04-27 05:07:52.389183391 +0000 UTC m=+685.957294455 I0427 05:07:52.532437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:52.532756 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:52.532750452 +0000 UTC m=+686.100861506 I0427 05:07:52.645948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-l57pb" condition "Ready" to 2026-04-27 05:07:52.64593587 +0000 UTC m=+686.214046944 I0427 05:07:53.236037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:53.301170 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:53.301158816 +0000 UTC m=+686.869269900 I0427 05:07:53.436281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:56.474846 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" condition "Ready" to 2026-04-27 05:07:56.474833277 +0000 UTC m=+690.042944321 I0427 05:07:56.475217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:07:56.475227 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" condition "Issuing" to 2026-04-27 05:07:56.47522484 +0000 UTC m=+690.043335894 I0427 05:07:56.497269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-psbqd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:56.497379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:07:56.497401 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" condition "Issuing" to 2026-04-27 05:07:56.497393528 +0000 UTC m=+690.065504612 I0427 05:07:56.708615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-psbqd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:56.715594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-psbqd-lsmmc" condition "Approved" to 2026-04-27 05:07:56.715586474 +0000 UTC m=+690.283697518 I0427 05:07:56.750079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-psbqd-lsmmc" condition "Ready" to 2026-04-27 05:07:56.750070147 +0000 UTC m=+690.318181201 I0427 05:07:56.780695 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:56.780686629 +0000 UTC m=+690.348797673 I0427 05:07:56.812664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-psbqd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:07:56.812931 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:07:56.812923676 +0000 UTC m=+690.381034740 I0427 05:07:56.849249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psbqd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-psbqd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:08:08.681295 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 05:08:08.681277977 +0000 UTC m=+702.249389061 I0427 05:08:08.681628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:08:08.681654 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 05:08:08.681649319 +0000 UTC m=+702.249760393 I0427 05:08:08.697837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 05:08:08.697901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 05:08:08.697916 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 05:08:08.697910754 +0000 UTC m=+702.266021818 I0427 05:08:09.041417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7sbrg" condition "Approved" to 2026-04-27 05:08:09.041381001 +0000 UTC m=+702.609492075 I0427 05:08:09.060255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7sbrg" condition "Ready" to 2026-04-27 05:08:09.06024015 +0000 UTC m=+702.628351234 I0427 05:08:09.093058 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 05:08:09.093042907 +0000 UTC m=+702.661153981 I0427 05:08:09.121636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"