I0411 17:43:05.972413 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0411 17:43:05.972712 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0411 17:43:05.972938 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0411 17:43:05.976906 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0411 17:43:05.977276 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0411 17:43:05.977368 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0411 17:43:05.977379 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0411 17:43:05.979761 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0411 17:43:05.995321 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0411 17:43:06.001725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0411 17:43:06.008362 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0411 17:43:06.012412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0411 17:43:06.015987 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0411 17:43:06.016026 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0411 17:43:06.017910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0411 17:43:06.020035 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0411 17:43:06.020142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0411 17:43:06.021922 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0411 17:43:06.023753 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0411 17:43:06.030966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0411 17:43:06.034936 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0411 17:43:06.034969 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0411 17:43:06.034971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0411 17:43:06.034991 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0411 17:43:06.037210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0411 17:43:06.038899 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0411 17:43:06.041413 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0411 17:43:06.044149 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0411 17:43:06.046752 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0411 17:43:06.052430 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0411 17:43:06.056409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0411 17:43:06.060312 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0411 17:43:06.060369 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0411 17:43:06.063381 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:06.063454 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:06.063819 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:06.064679 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:06.065193 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:06.066642 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:06.067120 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:06.067319 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:06.067456 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:06.153633 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:17.173264 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-11 17:43:17.17324356 +0000 UTC m=+11.238534691 I0411 17:43:17.890413 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-11 17:43:17.890397226 +0000 UTC m=+11.955688367 I0411 17:43:17.891069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:43:17.891187 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 17:43:17.891176473 +0000 UTC m=+11.956467604 E0411 17:43:17.905773 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:43:17.905931 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-11 17:43:17.905913602 +0000 UTC m=+11.971204743 E0411 17:43:17.906530 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:43:17.907398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:17.907447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:43:17.907462 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 17:43:17.907457558 +0000 UTC m=+11.972748679 E0411 17:43:17.923126 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0411 17:43:17.923436 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:43:17.923581 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:43:17.923729 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0411 17:43:17.962478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bxhlq" condition "Approved" to 2026-04-11 17:43:17.962446222 +0000 UTC m=+12.027737363 I0411 17:43:17.974136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bxhlq" condition "Ready" to 2026-04-11 17:43:17.97412603 +0000 UTC m=+12.039417141 I0411 17:43:18.001464 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:18.001453998 +0000 UTC m=+12.066745109 I0411 17:43:18.021271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:18.021730 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:18.021721055 +0000 UTC m=+12.087012166 I0411 17:43:18.023004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:18.032550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:18.032954 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:18.032942253 +0000 UTC m=+12.098233394 I0411 17:43:22.924495 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:22.924481419 +0000 UTC m=+16.989772550 I0411 17:43:44.940304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:43:44.940303 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-11 17:43:44.939306928 +0000 UTC m=+39.004598039 I0411 17:43:44.940360 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 17:43:44.940351533 +0000 UTC m=+39.005642624 I0411 17:43:44.951144 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-11 17:43:44.951130372 +0000 UTC m=+39.016421473 I0411 17:43:44.978057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:44.978115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:43:44.978132 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 17:43:44.978126745 +0000 UTC m=+39.043417846 I0411 17:43:45.161385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vdbrf" condition "Approved" to 2026-04-11 17:43:45.161366003 +0000 UTC m=+39.226657114 I0411 17:43:45.191941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vdbrf" condition "Ready" to 2026-04-11 17:43:45.19193079 +0000 UTC m=+39.257221901 I0411 17:43:45.235730 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:45.235704942 +0000 UTC m=+39.300996053 I0411 17:43:45.258931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:45.259212 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:45.259207296 +0000 UTC m=+39.324498397 I0411 17:43:45.286681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:03.123381 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-244.nip.io-tls" condition "Ready" to 2026-04-11 17:48:03.123364275 +0000 UTC m=+297.188655406 I0411 17:48:03.123576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-244.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:03.123715 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-244.nip.io-tls" condition "Issuing" to 2026-04-11 17:48:03.123704743 +0000 UTC m=+297.188995884 I0411 17:48:03.139675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:03.139744 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-244.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:03.139764 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-244.nip.io-tls" condition "Issuing" to 2026-04-11 17:48:03.139759945 +0000 UTC m=+297.205051056 I0411 17:48:03.317223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:03.325707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-244.nip.io-tls-n24j7" condition "Approved" to 2026-04-11 17:48:03.325692289 +0000 UTC m=+297.390983430 I0411 17:48:03.351401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-244.nip.io-tls-n24j7" condition "Ready" to 2026-04-11 17:48:03.351384868 +0000 UTC m=+297.416676009 I0411 17:48:03.380130 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-244.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:03.380118105 +0000 UTC m=+297.445409216 I0411 17:48:03.397954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:03.398476 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-244.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:03.39847103 +0000 UTC m=+297.463762141 I0411 17:48:03.404760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:03.417416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:08.273848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:08.273897 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 17:49:08.2738864 +0000 UTC m=+362.339177541 I0411 17:49:08.274209 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 17:49:08.274200716 +0000 UTC m=+362.339491857 E0411 17:49:08.288710 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:49:08.288776 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-11 17:49:08.288770069 +0000 UTC m=+362.354061180 E0411 17:49:08.288802 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:49:08.289240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:08.289292 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 17:49:08.289287051 +0000 UTC m=+362.354578162 E0411 17:49:08.305039 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0411 17:49:08.305245 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:49:08.305276 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:49:08.305464 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0411 17:49:08.307966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:08.332201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wkt7s" condition "Approved" to 2026-04-11 17:49:08.33218737 +0000 UTC m=+362.397478501 I0411 17:49:08.344996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wkt7s" condition "Ready" to 2026-04-11 17:49:08.344983452 +0000 UTC m=+362.410274563 I0411 17:49:08.365423 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:08.365406768 +0000 UTC m=+362.430697879 I0411 17:49:08.384542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:08.384758 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:08.384747889 +0000 UTC m=+362.450038990 I0411 17:49:08.402780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:08.404939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:13.305436 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:13.305422858 +0000 UTC m=+367.370713989 I0411 17:49:55.291046 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-11 17:49:55.291033138 +0000 UTC m=+409.356324239 I0411 17:49:55.281615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:55.292460 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 17:49:55.29244796 +0000 UTC m=+409.357739061 I0411 17:49:55.308870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:55.308897 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-11 17:49:55.308894178 +0000 UTC m=+409.374185279 I0411 17:49:55.309193 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 17:49:55.309189735 +0000 UTC m=+409.374480836 I0411 17:49:55.309313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:55.309327 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-11 17:49:55.309324858 +0000 UTC m=+409.374615949 I0411 17:49:55.308764 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 17:49:55.308755805 +0000 UTC m=+409.374046906 I0411 17:49:55.337289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:55.337355 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:55.337371 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 17:49:55.337367231 +0000 UTC m=+409.402658332 I0411 17:49:55.359667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:55.359741 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 17:49:55.359734625 +0000 UTC m=+409.425025726 I0411 17:49:55.379248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:55.379325 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 17:49:55.379318474 +0000 UTC m=+409.444609575 I0411 17:49:55.536125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:55.579420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6rxnb" condition "Approved" to 2026-04-11 17:49:55.579408685 +0000 UTC m=+409.644699786 I0411 17:49:55.585922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:55.597132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2x2kf" condition "Approved" to 2026-04-11 17:49:55.597122922 +0000 UTC m=+409.662414023 I0411 17:49:55.612362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6rxnb" condition "Ready" to 2026-04-11 17:49:55.612356342 +0000 UTC m=+409.677647443 I0411 17:49:55.620590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2x2kf" condition "Ready" to 2026-04-11 17:49:55.620584301 +0000 UTC m=+409.685875412 I0411 17:49:55.649764 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:55.64975186 +0000 UTC m=+409.715042961 I0411 17:49:55.652766 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:55.652761419 +0000 UTC m=+409.718052530 I0411 17:49:55.683181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:55.687254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:55.689705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:56.012983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kfdn8" condition "Approved" to 2026-04-11 17:49:56.012970505 +0000 UTC m=+410.078261606 I0411 17:49:56.274223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kfdn8" condition "Ready" to 2026-04-11 17:49:56.274211581 +0000 UTC m=+410.339502692 I0411 17:49:56.766001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:56.814846 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:56.814814967 +0000 UTC m=+410.880106078 I0411 17:49:56.910574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:56.911317 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:56.911305142 +0000 UTC m=+410.976596273 I0411 17:49:57.163973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:57.212789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:50:09.521710 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls" condition "Ready" to 2026-04-11 17:50:09.521689528 +0000 UTC m=+423.586980629 I0411 17:50:09.521944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:50:09.524176 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls" condition "Issuing" to 2026-04-11 17:50:09.524166216 +0000 UTC m=+423.589457337 I0411 17:50:09.544313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:50:09.544407 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls" condition "Ready" to 2026-04-11 17:50:09.544399751 +0000 UTC m=+423.609690852 I0411 17:50:09.805894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:50:09.840097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lgcmc-4285b" condition "Approved" to 2026-04-11 17:50:09.840085724 +0000 UTC m=+423.905376825 I0411 17:50:09.862634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lgcmc-4285b" condition "Ready" to 2026-04-11 17:50:09.862624083 +0000 UTC m=+423.927915194 I0411 17:50:09.897186 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:50:09.897165126 +0000 UTC m=+423.962456227 I0411 17:50:09.918454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:50:09.919061 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:50:09.919053549 +0000 UTC m=+423.984344650 I0411 17:50:09.938031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lgcmc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:50:16.448831 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-11 17:50:16.44880794 +0000 UTC m=+430.514099041 I0411 17:50:16.449440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:50:16.449473 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 17:50:16.449469534 +0000 UTC m=+430.514760635 I0411 17:50:16.470176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:50:16.470219 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-11 17:50:16.470215781 +0000 UTC m=+430.535506882 I0411 17:50:16.761886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:50:16.796359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8clnt" condition "Approved" to 2026-04-11 17:50:16.79634288 +0000 UTC m=+430.861633991 I0411 17:50:16.820219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8clnt" condition "Ready" to 2026-04-11 17:50:16.820208418 +0000 UTC m=+430.885499529 I0411 17:50:16.858719 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:50:16.858700704 +0000 UTC m=+430.923991795 I0411 17:50:16.877944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:50:16.878579 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:50:16.87856681 +0000 UTC m=+430.943857911 I0411 17:50:16.900984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:31.246221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:53:31.246253 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-11 17:53:31.246245976 +0000 UTC m=+625.311537077 I0411 17:53:31.246590 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-11 17:53:31.246579024 +0000 UTC m=+625.311870165 I0411 17:53:31.266827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:31.266907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:53:31.267074 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-11 17:53:31.266916125 +0000 UTC m=+625.332207236 I0411 17:53:31.508960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7cntd" condition "Approved" to 2026-04-11 17:53:31.508943234 +0000 UTC m=+625.574234345 I0411 17:53:31.532444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7cntd" condition "Ready" to 2026-04-11 17:53:31.532432319 +0000 UTC m=+625.597723430 I0411 17:53:31.561153 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:53:31.561132584 +0000 UTC m=+625.626423685 I0411 17:53:31.595402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:54:13.442503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:54:13.442553 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-11 17:54:13.442541983 +0000 UTC m=+667.507833124 I0411 17:54:13.442801 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-11 17:54:13.442781059 +0000 UTC m=+667.508072190 I0411 17:54:13.467253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:54:13.467354 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-11 17:54:13.467342019 +0000 UTC m=+667.532633160 I0411 17:54:13.694843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:54:13.738342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rr44d" condition "Approved" to 2026-04-11 17:54:13.738326853 +0000 UTC m=+667.803617954 I0411 17:54:13.760728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rr44d" condition "Ready" to 2026-04-11 17:54:13.760712793 +0000 UTC m=+667.826003904 I0411 17:54:13.796700 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:54:13.79637824 +0000 UTC m=+667.861669331 I0411 17:54:13.819765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:54:13.820175 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:54:13.820165742 +0000 UTC m=+667.885456843 I0411 17:54:13.843534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:54:13.846468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"