I0418 09:07:36.668160 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0418 09:07:36.668286 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0418 09:07:36.668375 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0418 09:07:36.675605 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0418 09:07:36.676246 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0418 09:07:36.676355 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0418 09:07:36.676373 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0418 09:07:36.682228 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0418 09:07:36.697795 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0418 09:07:36.703539 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0418 09:07:36.703581 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0418 09:07:36.706795 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0418 09:07:36.713429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0418 09:07:36.717810 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0418 09:07:36.720421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0418 09:07:36.723536 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0418 09:07:36.726202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0418 09:07:36.728722 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0418 09:07:36.734802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0418 09:07:36.737798 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0418 09:07:36.740714 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0418 09:07:36.740748 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0418 09:07:36.740754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0418 09:07:36.743383 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0418 09:07:36.743471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0418 09:07:36.746555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0418 09:07:36.750812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0418 09:07:36.754750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0418 09:07:36.758662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0418 09:07:36.760237 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0418 09:07:36.760266 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0418 09:07:36.760354 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0418 09:07:36.763250 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0418 09:07:36.767386 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:07:36.768332 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:07:36.769195 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:07:36.770915 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:07:36.787294 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:07:36.802429 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:07:36.819208 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:07:36.834655 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:07:36.857346 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:07:36.860938 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:07:48.607617 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-18 09:07:48.607602752 +0000 UTC m=+11.977715379 I0418 09:07:49.355383 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 09:07:49.355368208 +0000 UTC m=+12.725480865 I0418 09:07:49.356043 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:07:49.356328 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 09:07:49.356310821 +0000 UTC m=+12.726423488 E0418 09:07:49.379600 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:07:49.379685 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-18 09:07:49.379678134 +0000 UTC m=+12.749790761 E0418 09:07:49.379744 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:07:49.380411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:07:49.380497 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 09:07:49.380490358 +0000 UTC m=+12.750602985 E0418 09:07:49.392996 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0418 09:07:49.393082 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:07:49.393121 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:07:49.393160 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0418 09:07:49.394216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:07:49.394283 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 09:07:49.394275504 +0000 UTC m=+12.764388121 I0418 09:07:49.402604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kc6p8" condition "Approved" to 2026-04-18 09:07:49.402592586 +0000 UTC m=+12.772705223 I0418 09:07:49.407282 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 09:07:49.407274147 +0000 UTC m=+12.777386774 I0418 09:07:49.414377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:07:49.416582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kc6p8" condition "Ready" to 2026-04-18 09:07:49.416575005 +0000 UTC m=+12.786687622 I0418 09:07:49.437021 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:07:49.437006163 +0000 UTC m=+12.807118810 I0418 09:07:49.450889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:07:54.396134 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:07:54.396120793 +0000 UTC m=+17.766233410 I0418 09:08:21.406261 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 09:08:21.406236963 +0000 UTC m=+44.776349630 I0418 09:08:21.406473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:08:21.406636 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 09:08:21.40661984 +0000 UTC m=+44.776732527 I0418 09:08:21.495525 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-18 09:08:21.494048471 +0000 UTC m=+44.864161118 I0418 09:08:21.498699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:08:21.498749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:08:21.498958 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 09:08:21.498951234 +0000 UTC m=+44.869063861 I0418 09:08:21.744116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:08:21.758927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-szfhv" condition "Approved" to 2026-04-18 09:08:21.758916004 +0000 UTC m=+45.129028631 I0418 09:08:21.786146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-szfhv" condition "Ready" to 2026-04-18 09:08:21.786133376 +0000 UTC m=+45.156246013 I0418 09:08:21.818060 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:08:21.818044667 +0000 UTC m=+45.188157304 I0418 09:08:21.840040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:50.137104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:12:50.137174 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-04-18 09:12:50.13713909 +0000 UTC m=+313.507251737 I0418 09:12:50.137666 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-04-18 09:12:50.137655761 +0000 UTC m=+313.507768388 I0418 09:12:50.156151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:50.156248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:12:50.156282 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-04-18 09:12:50.156273911 +0000 UTC m=+313.526386558 I0418 09:12:50.536801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:50.549404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-x4475" condition "Approved" to 2026-04-18 09:12:50.549390363 +0000 UTC m=+313.919503010 I0418 09:12:50.572981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-x4475" condition "Ready" to 2026-04-18 09:12:50.572971402 +0000 UTC m=+313.943084029 I0418 09:12:50.634319 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:50.634306332 +0000 UTC m=+314.004418939 I0418 09:12:50.667826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:55.054480 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 09:13:55.054441273 +0000 UTC m=+378.424553890 I0418 09:13:55.054589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:55.054626 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 09:13:55.054618252 +0000 UTC m=+378.424730879 E0418 09:13:55.068020 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:13:55.068065 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-18 09:13:55.068057764 +0000 UTC m=+378.438170391 E0418 09:13:55.068103 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:13:55.076107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:55.076237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:55.076299 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 09:13:55.076288595 +0000 UTC m=+378.446401242 E0418 09:13:55.079448 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0418 09:13:55.079520 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:13:55.079558 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:13:55.079590 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0418 09:13:55.116492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t2k7s" condition "Approved" to 2026-04-18 09:13:55.116474085 +0000 UTC m=+378.486586732 I0418 09:13:55.128065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t2k7s" condition "Ready" to 2026-04-18 09:13:55.128052924 +0000 UTC m=+378.498165551 I0418 09:13:55.153823 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:55.153811041 +0000 UTC m=+378.523923668 I0418 09:13:55.169060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:55.209126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:00.080035 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:00.080015989 +0000 UTC m=+383.450128646 I0418 09:14:41.559145 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 09:14:41.559130186 +0000 UTC m=+424.929242813 I0418 09:14:41.559428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:41.559454 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 09:14:41.559449713 +0000 UTC m=+424.929562330 I0418 09:14:41.559730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:41.559749 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 09:14:41.559745618 +0000 UTC m=+424.929858235 I0418 09:14:41.559985 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 09:14:41.55996669 +0000 UTC m=+424.930079317 I0418 09:14:41.561461 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 09:14:41.56145677 +0000 UTC m=+424.931569387 I0418 09:14:41.561692 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:41.561708 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 09:14:41.561705763 +0000 UTC m=+424.931818380 I0418 09:14:41.610944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:41.611014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:41.611033 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 09:14:41.61102757 +0000 UTC m=+424.981140177 I0418 09:14:41.614046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:41.614055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:41.614083 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:41.614098 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 09:14:41.614095074 +0000 UTC m=+424.984207691 I0418 09:14:41.614286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:41.614321 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 09:14:41.614314536 +0000 UTC m=+424.984427153 I0418 09:14:41.802808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:41.807561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-smqz7" condition "Approved" to 2026-04-18 09:14:41.807545998 +0000 UTC m=+425.177658625 I0418 09:14:41.828992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-smqz7" condition "Ready" to 2026-04-18 09:14:41.828980624 +0000 UTC m=+425.199093231 I0418 09:14:41.853612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:41.880770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jmcb9" condition "Approved" to 2026-04-18 09:14:41.880755702 +0000 UTC m=+425.250868329 I0418 09:14:41.890476 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:41.890464501 +0000 UTC m=+425.260577118 I0418 09:14:41.906129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jmcb9" condition "Ready" to 2026-04-18 09:14:41.906118558 +0000 UTC m=+425.276231175 I0418 09:14:41.915653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bcwvz" condition "Approved" to 2026-04-18 09:14:41.915638577 +0000 UTC m=+425.285751184 I0418 09:14:41.928839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:41.929157 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:41.92915194 +0000 UTC m=+425.299264557 I0418 09:14:42.006526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bcwvz" condition "Ready" to 2026-04-18 09:14:42.006511676 +0000 UTC m=+425.376624293 I0418 09:14:42.340610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:42.340850 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:42.340843103 +0000 UTC m=+425.710955720 I0418 09:14:42.399862 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:42.399837871 +0000 UTC m=+425.769950518 E0418 09:14:42.569836 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-rmbgk\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0418 09:14:42.640669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:42.791411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:42.791791 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:42.791783632 +0000 UTC m=+426.161896259 I0418 09:14:42.842418 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:42.842405262 +0000 UTC m=+426.212517899 I0418 09:14:43.090754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:43.091596 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:43.091523452 +0000 UTC m=+426.461636109 I0418 09:14:43.143511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:43.392818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:51.038851 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls" condition "Ready" to 2026-04-18 09:14:51.038811657 +0000 UTC m=+434.408924304 I0418 09:14:51.039343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:51.039368 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls" condition "Issuing" to 2026-04-18 09:14:51.039362507 +0000 UTC m=+434.409475154 I0418 09:14:51.056401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:51.056506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:51.056623 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls" condition "Issuing" to 2026-04-18 09:14:51.056586108 +0000 UTC m=+434.426698755 I0418 09:14:51.317449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8qqvk-p4nqj" condition "Approved" to 2026-04-18 09:14:51.317435332 +0000 UTC m=+434.687547959 I0418 09:14:51.345750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8qqvk-p4nqj" condition "Ready" to 2026-04-18 09:14:51.345730912 +0000 UTC m=+434.715843529 I0418 09:14:51.386079 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:51.386057973 +0000 UTC m=+434.756170720 I0418 09:14:51.417512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:51.417908 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:51.417899014 +0000 UTC m=+434.788011631 I0418 09:14:51.458037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qqvk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:07.088612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:15:07.088644 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 09:15:07.088635566 +0000 UTC m=+450.458748193 I0418 09:15:07.088650 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 09:15:07.088644957 +0000 UTC m=+450.458757574 I0418 09:15:07.104790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:07.104874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:15:07.104894 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 09:15:07.104886309 +0000 UTC m=+450.474998946 I0418 09:15:07.329441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zqlm4" condition "Approved" to 2026-04-18 09:15:07.329427825 +0000 UTC m=+450.699540442 I0418 09:15:07.354008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zqlm4" condition "Ready" to 2026-04-18 09:15:07.353997195 +0000 UTC m=+450.724109812 I0418 09:15:07.392417 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:15:07.392404195 +0000 UTC m=+450.762516812 I0418 09:15:07.420706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:07.421101 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:15:07.421092682 +0000 UTC m=+450.791205309 I0418 09:15:07.441433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:15.159647 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:18:15.159734 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 09:18:15.15970368 +0000 UTC m=+638.529816297 I0418 09:18:15.159734 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 09:18:15.15971166 +0000 UTC m=+638.529824307 I0418 09:18:15.179109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:15.179232 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 09:18:15.179224504 +0000 UTC m=+638.549337131 I0418 09:18:15.298926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:15.330606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kvt48" condition "Approved" to 2026-04-18 09:18:15.330561593 +0000 UTC m=+638.700674270 I0418 09:18:15.349713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kvt48" condition "Ready" to 2026-04-18 09:18:15.349704543 +0000 UTC m=+638.719817160 I0418 09:18:15.381066 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:18:15.381056135 +0000 UTC m=+638.751168762 I0418 09:18:15.398401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:15.398781 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:18:15.398775358 +0000 UTC m=+638.768887995 I0418 09:18:15.423197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:56.312179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:18:56.312214 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-18 09:18:56.312202792 +0000 UTC m=+679.682315409 I0418 09:18:56.312665 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-18 09:18:56.312660599 +0000 UTC m=+679.682773216 I0418 09:18:56.338801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:56.338872 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-18 09:18:56.338866009 +0000 UTC m=+679.708978626 I0418 09:18:56.454401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:56.482178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rkt4s" condition "Approved" to 2026-04-18 09:18:56.48216799 +0000 UTC m=+679.852280607 I0418 09:18:56.501796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rkt4s" condition "Ready" to 2026-04-18 09:18:56.501785999 +0000 UTC m=+679.871898616 I0418 09:18:56.537970 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:18:56.537954448 +0000 UTC m=+679.908067105 I0418 09:18:56.561704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"