I0413 20:49:15.500943 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0413 20:49:15.501057 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0413 20:49:15.501142 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0413 20:49:15.504416 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0413 20:49:15.504776 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0413 20:49:15.504908 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0413 20:49:15.505054 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0413 20:49:15.507332 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0413 20:49:15.524415 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0413 20:49:15.528654 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0413 20:49:15.531797 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0413 20:49:15.531819 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0413 20:49:15.531930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0413 20:49:15.533831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0413 20:49:15.535860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0413 20:49:15.538354 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0413 20:49:15.538384 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0413 20:49:15.538702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0413 20:49:15.544683 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0413 20:49:15.547525 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0413 20:49:15.549334 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0413 20:49:15.551054 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0413 20:49:15.553037 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0413 20:49:15.554853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0413 20:49:15.556551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0413 20:49:15.561876 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0413 20:49:15.566210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0413 20:49:15.568757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0413 20:49:15.570624 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0413 20:49:15.572377 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0413 20:49:15.572428 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0413 20:49:15.572431 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0413 20:49:15.579462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0413 20:49:15.579921 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 20:49:15.581266 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 20:49:15.581483 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 20:49:15.583663 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 20:49:15.602970 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 20:49:15.620296 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 20:49:15.642764 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 20:49:15.658457 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 20:49:15.670717 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 20:49:15.688773 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 20:49:27.565678 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-13 20:49:27.565653157 +0000 UTC m=+12.099849412 I0413 20:49:28.333905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:49:28.333974 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 20:49:28.333964547 +0000 UTC m=+12.868160802 I0413 20:49:28.333951 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 20:49:28.333936307 +0000 UTC m=+12.868132552 E0413 20:49:28.354574 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 20:49:28.354649 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-13 20:49:28.354641462 +0000 UTC m=+12.888837687 E0413 20:49:28.354671 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 20:49:28.358170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:49:28.358238 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 20:49:28.35822961 +0000 UTC m=+12.892425825 E0413 20:49:28.364872 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0413 20:49:28.365072 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 20:49:28.365143 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 20:49:28.365211 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0413 20:49:28.378707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:49:28.401430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-j2646" condition "Approved" to 2026-04-13 20:49:28.401412051 +0000 UTC m=+12.935608326 I0413 20:49:28.415289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-j2646" condition "Ready" to 2026-04-13 20:49:28.41527614 +0000 UTC m=+12.949472365 I0413 20:49:28.433417 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:49:28.433406876 +0000 UTC m=+12.967603101 I0413 20:49:28.452254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:49:33.366237 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:49:33.366224139 +0000 UTC m=+17.900420384 I0413 20:49:56.437046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:49:56.437180 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 20:49:56.437102438 +0000 UTC m=+40.971298663 I0413 20:49:56.437418 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 20:49:56.437400275 +0000 UTC m=+40.971596490 I0413 20:49:56.452530 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-13 20:49:56.4525182 +0000 UTC m=+40.986714415 I0413 20:49:56.484940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:49:56.485032 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:49:56.485075 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 20:49:56.485065961 +0000 UTC m=+41.019262196 I0413 20:49:56.614490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:49:56.621706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-c94w2" condition "Approved" to 2026-04-13 20:49:56.621680458 +0000 UTC m=+41.155876693 I0413 20:49:56.657234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-c94w2" condition "Ready" to 2026-04-13 20:49:56.657222062 +0000 UTC m=+41.191418287 I0413 20:49:56.690037 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:49:56.690020428 +0000 UTC m=+41.224216653 I0413 20:49:56.712911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:49:56.713477 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:49:56.713467869 +0000 UTC m=+41.247664104 I0413 20:49:56.733020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:54:17.512546 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-48.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:54:17.513084 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-48.nip.io-tls" condition "Issuing" to 2026-04-13 20:54:17.512585611 +0000 UTC m=+302.046781836 I0413 20:54:17.513749 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-48.nip.io-tls" condition "Ready" to 2026-04-13 20:54:17.513743146 +0000 UTC m=+302.047939391 I0413 20:54:17.534968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-48.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-48.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:54:17.535055 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-48.nip.io-tls" condition "Ready" to 2026-04-13 20:54:17.535044023 +0000 UTC m=+302.069240248 I0413 20:54:17.691721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-48.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-48.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:54:17.721170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-48.nip.io-tls-srbd7" condition "Approved" to 2026-04-13 20:54:17.721158726 +0000 UTC m=+302.255354941 I0413 20:54:17.754389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-48.nip.io-tls-srbd7" condition "Ready" to 2026-04-13 20:54:17.754371619 +0000 UTC m=+302.288567874 I0413 20:54:17.786697 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-48.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:54:17.786676482 +0000 UTC m=+302.320872737 I0413 20:54:17.804829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-48.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-48.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:54:17.805454 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-48.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:54:17.805445331 +0000 UTC m=+302.339641556 I0413 20:54:17.826865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-48.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-48.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:55:25.351305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:55:25.351353 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 20:55:25.35133506 +0000 UTC m=+369.885531285 I0413 20:55:25.351766 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 20:55:25.351740017 +0000 UTC m=+369.885936272 I0413 20:55:25.368012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:55:25.368077 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 20:55:25.368067919 +0000 UTC m=+369.902264144 E0413 20:55:25.368853 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 20:55:25.368884 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-13 20:55:25.368878754 +0000 UTC m=+369.903074979 E0413 20:55:25.369075 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 20:55:25.383349 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0413 20:55:25.383965 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 20:55:25.384011 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 20:55:25.384107 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0413 20:55:25.387756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:55:25.409446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m47n5" condition "Approved" to 2026-04-13 20:55:25.40943019 +0000 UTC m=+369.943626435 I0413 20:55:25.421633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m47n5" condition "Ready" to 2026-04-13 20:55:25.421613708 +0000 UTC m=+369.955809933 I0413 20:55:25.444968 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:55:25.444953276 +0000 UTC m=+369.979149491 I0413 20:55:25.461283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:55:25.461952 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:55:25.46193878 +0000 UTC m=+369.996135035 I0413 20:55:25.480152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:55:30.384681 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:55:30.384665816 +0000 UTC m=+374.918862031 I0413 20:56:14.675267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:56:14.675343 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 20:56:14.675291268 +0000 UTC m=+419.209487483 I0413 20:56:14.675960 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 20:56:14.675954539 +0000 UTC m=+419.210150744 I0413 20:56:14.676224 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 20:56:14.676220844 +0000 UTC m=+419.210417059 I0413 20:56:14.676431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:56:14.676444 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 20:56:14.676441417 +0000 UTC m=+419.210637632 I0413 20:56:14.696107 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 20:56:14.696084289 +0000 UTC m=+419.230280524 I0413 20:56:14.696602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:56:14.696633 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 20:56:14.696630587 +0000 UTC m=+419.230826792 I0413 20:56:14.755769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:14.755877 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 20:56:14.755868617 +0000 UTC m=+419.290064832 I0413 20:56:14.767604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:14.768091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:56:14.775503 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 20:56:14.775470398 +0000 UTC m=+419.309666693 I0413 20:56:14.775823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:14.775903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:56:14.775927 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 20:56:14.775924265 +0000 UTC m=+419.310120470 I0413 20:56:14.913369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:14.961562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-h9krd" condition "Approved" to 2026-04-13 20:56:14.961547091 +0000 UTC m=+419.495743316 I0413 20:56:14.989141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-h9krd" condition "Ready" to 2026-04-13 20:56:14.989124179 +0000 UTC m=+419.523320404 I0413 20:56:15.013033 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:15.013017948 +0000 UTC m=+419.547214173 I0413 20:56:15.013955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:15.019586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hrvxs" condition "Approved" to 2026-04-13 20:56:15.019575721 +0000 UTC m=+419.553771936 I0413 20:56:15.045286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:15.045981 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:15.04597327 +0000 UTC m=+419.580169485 I0413 20:56:15.064983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hrvxs" condition "Ready" to 2026-04-13 20:56:15.06497089 +0000 UTC m=+419.599167105 I0413 20:56:15.093316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:15.110521 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:15.110507602 +0000 UTC m=+419.644703817 I0413 20:56:15.111502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:15.161940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:15.162259 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:15.162250491 +0000 UTC m=+419.696446706 I0413 20:56:15.471542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:15.669674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mjkv2" condition "Approved" to 2026-04-13 20:56:15.669654347 +0000 UTC m=+420.203850572 I0413 20:56:15.772414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mjkv2" condition "Ready" to 2026-04-13 20:56:15.772394374 +0000 UTC m=+420.306590619 I0413 20:56:16.268058 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:16.268039695 +0000 UTC m=+420.802235950 I0413 20:56:16.414615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:22.884542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:56:22.884598 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" condition "Issuing" to 2026-04-13 20:56:22.884580554 +0000 UTC m=+427.418776779 I0413 20:56:22.885429 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" condition "Ready" to 2026-04-13 20:56:22.885420567 +0000 UTC m=+427.419616792 I0413 20:56:22.902558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:22.902644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:56:22.902669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" condition "Issuing" to 2026-04-13 20:56:22.902658366 +0000 UTC m=+427.436854611 I0413 20:56:23.109061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gxmgb-gszb4" condition "Approved" to 2026-04-13 20:56:23.109044164 +0000 UTC m=+427.643240379 I0413 20:56:23.125574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gxmgb-gszb4" condition "Ready" to 2026-04-13 20:56:23.125565032 +0000 UTC m=+427.659761267 I0413 20:56:23.164051 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:23.16403414 +0000 UTC m=+427.698230365 I0413 20:56:23.190673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:23.191030 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:23.191021321 +0000 UTC m=+427.725217536 I0413 20:56:23.210190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:23.211144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:23.211480 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gxmgb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:23.211471269 +0000 UTC m=+427.745667484 I0413 20:56:36.090182 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 20:56:36.090162091 +0000 UTC m=+440.624358316 I0413 20:56:36.093889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:56:36.093938 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 20:56:36.093929438 +0000 UTC m=+440.628125653 I0413 20:56:36.114582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:36.114709 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:56:36.114739 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 20:56:36.114731225 +0000 UTC m=+440.648927450 I0413 20:56:36.702488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-28nhs" condition "Approved" to 2026-04-13 20:56:36.702463259 +0000 UTC m=+441.236659504 I0413 20:56:36.730762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-28nhs" condition "Ready" to 2026-04-13 20:56:36.730747118 +0000 UTC m=+441.264943343 I0413 20:56:36.774617 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:36.774601345 +0000 UTC m=+441.308797560 I0413 20:56:36.796012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:36.796478 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:36.796469867 +0000 UTC m=+441.330666092 I0413 20:56:36.813422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:56:36.813735 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:56:36.813726989 +0000 UTC m=+441.347923204 I0413 20:56:36.815859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:59:52.479160 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 20:59:52.479132913 +0000 UTC m=+637.013329158 I0413 20:59:52.479632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:59:52.479685 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 20:59:52.47967924 +0000 UTC m=+637.013875495 I0413 20:59:52.506609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:59:52.506696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 20:59:52.506722 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 20:59:52.506715984 +0000 UTC m=+637.040912199 I0413 20:59:52.769806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:59:52.775960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tn779" condition "Approved" to 2026-04-13 20:59:52.775943403 +0000 UTC m=+637.310139628 I0413 20:59:52.803965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tn779" condition "Ready" to 2026-04-13 20:59:52.803953958 +0000 UTC m=+637.338150183 I0413 20:59:52.838672 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:59:52.838661066 +0000 UTC m=+637.372857291 I0413 20:59:52.859715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 20:59:52.860072 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 20:59:52.86006551 +0000 UTC m=+637.394261735 I0413 20:59:52.877927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:00:39.753806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:00:39.753916 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-13 21:00:39.753902914 +0000 UTC m=+684.288099169 I0413 21:00:39.754770 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-13 21:00:39.754760534 +0000 UTC m=+684.288956779 I0413 21:00:39.784494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:00:39.784579 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-13 21:00:39.784571395 +0000 UTC m=+684.318767620 I0413 21:00:39.963184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:00:40.005007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ntng9" condition "Approved" to 2026-04-13 21:00:40.004995469 +0000 UTC m=+684.539191694 I0413 21:00:40.059886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ntng9" condition "Ready" to 2026-04-13 21:00:40.059869413 +0000 UTC m=+684.594065678 I0413 21:00:40.131763 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:00:40.131743891 +0000 UTC m=+684.665940106 I0413 21:00:40.169804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:00:40.239449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"