I0428 22:20:13.376808 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 22:20:13.377045 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 22:20:13.377177 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 22:20:13.380582 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 22:20:13.381046 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 22:20:13.381106 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 22:20:13.381113 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 22:20:13.385974 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 22:20:13.401107 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 22:20:13.408347 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 22:20:13.411412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 22:20:13.413964 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 22:20:13.413992 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 22:20:13.414034 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 22:20:13.414067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 22:20:13.419384 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 22:20:13.423346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 22:20:13.426182 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 22:20:13.428747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 22:20:13.431094 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 22:20:13.433071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 22:20:13.434816 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 22:20:13.438492 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 22:20:13.439003 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 22:20:13.444171 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 22:20:13.448553 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 22:20:13.448628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 22:20:13.451442 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 22:20:13.453350 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 22:20:13.455054 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 22:20:13.455110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 22:20:13.457076 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 22:20:13.459055 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 22:20:13.460914 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:13.461351 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:13.461945 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:13.462738 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:13.483458 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:13.505816 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:13.525304 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:13.535951 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:13.553451 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:13.553587 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:20:26.831041 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 22:20:26.831023264 +0000 UTC m=+13.490966037 I0428 22:20:27.594080 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 22:20:27.594069469 +0000 UTC m=+14.254012202 I0428 22:20:27.594684 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:20:27.594771 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 22:20:27.594760076 +0000 UTC m=+14.254702849 E0428 22:20:27.610567 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:20:27.610608 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 22:20:27.61060323 +0000 UTC m=+14.270545963 E0428 22:20:27.610624 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:20:27.613384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:27.613441 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 22:20:27.613424417 +0000 UTC m=+14.273367150 E0428 22:20:27.621439 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 22:20:27.621530 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:20:27.621557 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:20:27.621592 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 22:20:27.631887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:27.662298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lc8nr" condition "Approved" to 2026-04-28 22:20:27.66227864 +0000 UTC m=+14.322221373 I0428 22:20:27.680491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lc8nr" condition "Ready" to 2026-04-28 22:20:27.680475123 +0000 UTC m=+14.340417896 I0428 22:20:27.703949 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:20:27.703934978 +0000 UTC m=+14.363877751 I0428 22:20:27.724069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:32.622411 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:20:32.622392965 +0000 UTC m=+19.282335738 I0428 22:20:57.007063 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 22:20:57.007035247 +0000 UTC m=+43.666977990 I0428 22:20:57.007810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:20:57.007981 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 22:20:57.007975287 +0000 UTC m=+43.667918030 I0428 22:20:57.042972 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 22:20:57.042959889 +0000 UTC m=+43.702902632 I0428 22:20:57.048083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:57.048160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:20:57.048182 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 22:20:57.048176748 +0000 UTC m=+43.708119491 I0428 22:20:57.235936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7szmr" condition "Approved" to 2026-04-28 22:20:57.235919185 +0000 UTC m=+43.895861958 I0428 22:20:57.265694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7szmr" condition "Ready" to 2026-04-28 22:20:57.265682138 +0000 UTC m=+43.925624881 I0428 22:20:57.297609 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:20:57.297592875 +0000 UTC m=+43.957535618 I0428 22:20:57.319146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:57.324507 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:20:57.324499165 +0000 UTC m=+43.984441908 I0428 22:20:57.336035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:57.350404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:20:57.350651 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:20:57.350645094 +0000 UTC m=+44.010587817 I0428 22:26:56.189898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:26:56.190155 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Issuing" to 2026-04-28 22:26:56.190131193 +0000 UTC m=+402.850073986 I0428 22:26:56.190526 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready" to 2026-04-28 22:26:56.189806549 +0000 UTC m=+402.849749302 I0428 22:26:56.471401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:56.471471 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready" to 2026-04-28 22:26:56.471461118 +0000 UTC m=+403.131403881 I0428 22:26:56.970125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:57.183006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-dcdjj" condition "Approved" to 2026-04-28 22:26:57.182989502 +0000 UTC m=+403.842932265 I0428 22:26:57.366900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-dcdjj" condition "Ready" to 2026-04-28 22:26:57.366886451 +0000 UTC m=+404.026829194 I0428 22:26:57.525844 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:26:57.525828461 +0000 UTC m=+404.185771204 I0428 22:26:57.884784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:58.469022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:04.348585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:28:04.348625 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 22:28:04.348614522 +0000 UTC m=+471.008557285 I0428 22:28:04.348979 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 22:28:04.348971161 +0000 UTC m=+471.008913924 I0428 22:28:04.518270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:04.518359 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 22:28:04.518351956 +0000 UTC m=+471.178294699 E0428 22:28:04.697213 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:28:04.697283 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 22:28:04.697270768 +0000 UTC m=+471.357213531 E0428 22:28:04.697364 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:28:04.704421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0428 22:28:04.712927 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 22:28:04.713032 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:28:04.713069 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:28:04.713098 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 22:28:04.762564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kzkhk" condition "Approved" to 2026-04-28 22:28:04.762548005 +0000 UTC m=+471.422490768 I0428 22:28:04.907258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kzkhk" condition "Ready" to 2026-04-28 22:28:04.907247721 +0000 UTC m=+471.567190464 I0428 22:28:04.990706 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:04.990687252 +0000 UTC m=+471.650630025 I0428 22:28:05.041059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:09.714211 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:09.714196856 +0000 UTC m=+476.374139619 I0428 22:28:56.580207 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 22:28:56.580168119 +0000 UTC m=+523.240110852 I0428 22:28:56.580542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:28:56.580561 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 22:28:56.580558931 +0000 UTC m=+523.240501664 I0428 22:28:56.610425 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 22:28:56.610409116 +0000 UTC m=+523.270351839 I0428 22:28:56.610991 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:28:56.611038 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 22:28:56.611029101 +0000 UTC m=+523.270971824 I0428 22:28:56.611405 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 22:28:56.611384402 +0000 UTC m=+523.271327135 I0428 22:28:56.615911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:28:56.615969 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 22:28:56.615953513 +0000 UTC m=+523.275896246 I0428 22:28:56.641048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:56.641866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:28:56.641922 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 22:28:56.641912285 +0000 UTC m=+523.301855028 I0428 22:28:56.642284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:56.642352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:28:56.642385 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 22:28:56.642378182 +0000 UTC m=+523.302320915 I0428 22:28:56.648046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:56.648363 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 22:28:56.648352593 +0000 UTC m=+523.308295356 I0428 22:28:56.810714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:56.862372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ljsn5" condition "Approved" to 2026-04-28 22:28:56.862347684 +0000 UTC m=+523.522290417 I0428 22:28:56.863493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kn6dt" condition "Approved" to 2026-04-28 22:28:56.863467938 +0000 UTC m=+523.523410681 I0428 22:28:56.929090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kn6dt" condition "Ready" to 2026-04-28 22:28:56.929076015 +0000 UTC m=+523.589018748 I0428 22:28:56.930922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ljsn5" condition "Ready" to 2026-04-28 22:28:56.93091779 +0000 UTC m=+523.590860523 I0428 22:28:56.973175 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:56.973158762 +0000 UTC m=+523.633101485 I0428 22:28:56.973711 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:56.973707944 +0000 UTC m=+523.633650677 I0428 22:28:56.980319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hrks6" condition "Approved" to 2026-04-28 22:28:56.980305491 +0000 UTC m=+523.640248214 I0428 22:28:56.998108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:56.999067 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:56.999043111 +0000 UTC m=+523.658985854 I0428 22:28:56.999801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:57.000092 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:57.00008629 +0000 UTC m=+523.660029033 I0428 22:28:57.004166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hrks6" condition "Ready" to 2026-04-28 22:28:57.004151512 +0000 UTC m=+523.664094265 I0428 22:28:57.799015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:57.895221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:57.949452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:57.994604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:58.058556 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:58.058542398 +0000 UTC m=+524.718485141 I0428 22:28:58.349369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:58.349732 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:58.349723353 +0000 UTC m=+525.009666096 I0428 22:28:58.448807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:58.450102 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:58.450090417 +0000 UTC m=+525.110033160 I0428 22:28:58.496409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:21.195453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:29:21.195571 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" condition "Issuing" to 2026-04-28 22:29:21.195560364 +0000 UTC m=+547.855503107 I0428 22:29:21.195457 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" condition "Ready" to 2026-04-28 22:29:21.195406675 +0000 UTC m=+547.855349438 I0428 22:29:21.214505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:21.214653 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" condition "Ready" to 2026-04-28 22:29:21.21464067 +0000 UTC m=+547.874583413 I0428 22:29:21.352391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:21.382596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fzrwr-plpq5" condition "Approved" to 2026-04-28 22:29:21.382579498 +0000 UTC m=+548.042522241 I0428 22:29:21.402352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fzrwr-plpq5" condition "Ready" to 2026-04-28 22:29:21.402340935 +0000 UTC m=+548.062283678 I0428 22:29:21.437208 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:29:21.437192205 +0000 UTC m=+548.097134978 I0428 22:29:21.457595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:21.457869 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:29:21.457861754 +0000 UTC m=+548.117804487 I0428 22:29:21.664202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:21.669430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzrwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:45.173997 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 22:29:45.173956159 +0000 UTC m=+571.833898902 I0428 22:29:45.174834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:29:45.174855 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 22:29:45.174851022 +0000 UTC m=+571.834793775 I0428 22:29:45.202307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:45.202398 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 22:29:45.202389645 +0000 UTC m=+571.862332388 I0428 22:29:45.538061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:45.579490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-t6pqz" condition "Approved" to 2026-04-28 22:29:45.579468616 +0000 UTC m=+572.239411369 I0428 22:29:45.609421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-t6pqz" condition "Ready" to 2026-04-28 22:29:45.609409671 +0000 UTC m=+572.269352404 I0428 22:29:45.660552 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:29:45.660536161 +0000 UTC m=+572.320478904 I0428 22:29:45.709115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:45.775989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:01.534529 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 22:33:01.534492577 +0000 UTC m=+768.194435310 I0428 22:33:01.534817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:33:01.534890 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 22:33:01.534885373 +0000 UTC m=+768.194828106 I0428 22:33:01.556330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:01.556453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:33:01.556475 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 22:33:01.556469005 +0000 UTC m=+768.216411748 I0428 22:33:01.732996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9t6b2" condition "Approved" to 2026-04-28 22:33:01.732987802 +0000 UTC m=+768.392930545 I0428 22:33:01.760703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9t6b2" condition "Ready" to 2026-04-28 22:33:01.760688467 +0000 UTC m=+768.420631240 I0428 22:33:01.827009 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:33:01.826998208 +0000 UTC m=+768.486940941 I0428 22:33:01.855160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:46.855309 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:33:46.855343 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 22:33:46.855334308 +0000 UTC m=+813.515277051 I0428 22:33:46.855459 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 22:33:46.855396218 +0000 UTC m=+813.515338951 I0428 22:33:46.871137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:46.871221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:33:46.871250 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 22:33:46.871244111 +0000 UTC m=+813.531186854 I0428 22:33:47.191180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lttl7" condition "Approved" to 2026-04-28 22:33:47.191168483 +0000 UTC m=+813.851111226 I0428 22:33:47.220163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lttl7" condition "Ready" to 2026-04-28 22:33:47.220153676 +0000 UTC m=+813.880096409 I0428 22:33:47.247590 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:33:47.24758218 +0000 UTC m=+813.907524913 I0428 22:33:47.282880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:47.330166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"