I0420 14:18:30.530109 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 14:18:30.530261 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 14:18:30.530348 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 14:18:30.537235 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 14:18:30.537831 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 14:18:30.537978 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 14:18:30.538005 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 14:18:30.541222 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 14:18:30.553250 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 14:18:30.556891 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 14:18:30.557007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 14:18:30.559714 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 14:18:30.565101 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 14:18:30.567920 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 14:18:30.570211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 14:18:30.572750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 14:18:30.575545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 14:18:30.577577 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 14:18:30.579325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 14:18:30.584471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 14:18:30.586219 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 14:18:30.586328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 14:18:30.588126 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 14:18:30.589787 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 14:18:30.591831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 14:18:30.593610 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 14:18:30.595229 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 14:18:30.595243 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 14:18:30.597355 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 14:18:30.604031 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 14:18:30.604073 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 14:18:30.604083 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 14:18:30.604534 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 14:18:30.608311 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:18:30.608355 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:18:30.609015 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:18:30.627321 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:18:30.646115 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:18:30.657623 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:18:30.676162 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:18:30.690567 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:18:30.696810 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:18:30.704163 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:18:44.325492 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 14:18:44.325480416 +0000 UTC m=+13.823580846 I0420 14:18:45.008676 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 14:18:45.008659981 +0000 UTC m=+14.506760441 I0420 14:18:45.008877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:18:45.009092 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 14:18:45.009076847 +0000 UTC m=+14.507177297 E0420 14:18:45.025818 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:18:45.025899 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 14:18:45.025888221 +0000 UTC m=+14.523988681 E0420 14:18:45.025934 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:18:45.028683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:18:45.028870 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 14:18:45.028742886 +0000 UTC m=+14.526843326 E0420 14:18:45.042642 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 14:18:45.042944 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:18:45.043002 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:18:45.043037 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 14:18:45.047296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:18:45.047382 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 14:18:45.047375039 +0000 UTC m=+14.545475449 I0420 14:18:45.051339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mjzl5" condition "Approved" to 2026-04-20 14:18:45.051325831 +0000 UTC m=+14.549426251 I0420 14:18:45.072427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mjzl5" condition "Ready" to 2026-04-20 14:18:45.072410052 +0000 UTC m=+14.570510482 I0420 14:18:45.141438 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:18:45.141417025 +0000 UTC m=+14.639517485 I0420 14:18:45.162151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:18:50.043975 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:18:50.043955219 +0000 UTC m=+19.542055679 I0420 14:19:15.079158 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 14:19:15.07912232 +0000 UTC m=+44.577222750 I0420 14:19:15.079183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:19:15.079677 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 14:19:15.079667288 +0000 UTC m=+44.577767718 I0420 14:19:15.099184 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 14:19:15.099169263 +0000 UTC m=+44.597269693 I0420 14:19:15.106666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:19:15.106722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:19:15.106749 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 14:19:15.10674386 +0000 UTC m=+44.604844280 I0420 14:19:15.362366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gmfh5" condition "Approved" to 2026-04-20 14:19:15.362355148 +0000 UTC m=+44.860455578 I0420 14:19:15.405576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gmfh5" condition "Ready" to 2026-04-20 14:19:15.405558028 +0000 UTC m=+44.903658488 I0420 14:19:15.455088 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:19:15.455075746 +0000 UTC m=+44.953176176 I0420 14:19:15.531732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:19:15.532018 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:19:15.532012752 +0000 UTC m=+45.030113172 I0420 14:19:15.561376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:19:15.567154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:19:15.567919 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:19:15.567748936 +0000 UTC m=+45.065849366 I0420 14:25:07.780359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:25:07.780431 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Issuing" to 2026-04-20 14:25:07.780422089 +0000 UTC m=+397.278522529 I0420 14:25:07.780967 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-04-20 14:25:07.780959648 +0000 UTC m=+397.279060098 I0420 14:25:07.800467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:07.800535 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-04-20 14:25:07.800528337 +0000 UTC m=+397.298628757 I0420 14:25:08.099410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:08.127511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-55nbw" condition "Approved" to 2026-04-20 14:25:08.127496224 +0000 UTC m=+397.625596674 I0420 14:25:08.152375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-55nbw" condition "Ready" to 2026-04-20 14:25:08.152158361 +0000 UTC m=+397.650258791 I0420 14:25:08.181376 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:08.181361835 +0000 UTC m=+397.679462265 I0420 14:25:08.202513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:26:09.081242 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:26:09.081554 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 14:26:09.081542621 +0000 UTC m=+458.579643051 I0420 14:26:09.081534 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 14:26:09.081286957 +0000 UTC m=+458.579387407 I0420 14:26:09.329928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:26:09.330018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:26:09.330046 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 14:26:09.330038113 +0000 UTC m=+458.828138543 E0420 14:26:09.760322 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:26:09.760398 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 14:26:09.760373213 +0000 UTC m=+459.258473673 E0420 14:26:09.760485 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:26:10.076958 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 14:26:10.078180 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:26:10.078613 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:26:10.078787 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 14:26:10.470206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:26:10.527753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-47d2g" condition "Approved" to 2026-04-20 14:26:10.527740823 +0000 UTC m=+460.025841273 I0420 14:26:10.645377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-47d2g" condition "Ready" to 2026-04-20 14:26:10.645366805 +0000 UTC m=+460.143467235 I0420 14:26:11.028660 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:26:11.028637492 +0000 UTC m=+460.526737952 I0420 14:26:11.267937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:26:15.077969 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:26:15.077956218 +0000 UTC m=+464.576056648 I0420 14:27:00.097061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:27:00.097120 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 14:27:00.097111546 +0000 UTC m=+509.595211966 I0420 14:27:00.097323 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 14:27:00.097307939 +0000 UTC m=+509.595408359 I0420 14:27:00.110224 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 14:27:00.110209319 +0000 UTC m=+509.608309759 I0420 14:27:00.112768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:27:00.112825 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 14:27:00.112818649 +0000 UTC m=+509.610919079 I0420 14:27:00.122942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:27:00.122972 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 14:27:00.122966286 +0000 UTC m=+509.621066706 I0420 14:27:00.123188 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 14:27:00.123184069 +0000 UTC m=+509.621284489 I0420 14:27:00.156961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:00.157142 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 14:27:00.157044423 +0000 UTC m=+509.655144863 I0420 14:27:00.167961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:00.168114 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:27:00.168141 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 14:27:00.168134594 +0000 UTC m=+509.666235034 I0420 14:27:00.182843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:00.182929 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 14:27:00.182921223 +0000 UTC m=+509.681021653 I0420 14:27:00.410045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:00.584523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pctz9" condition "Approved" to 2026-04-20 14:27:00.584513155 +0000 UTC m=+510.082613575 I0420 14:27:00.831224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:00.834443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pctz9" condition "Ready" to 2026-04-20 14:27:00.834432851 +0000 UTC m=+510.332533281 I0420 14:27:01.069846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rz798" condition "Approved" to 2026-04-20 14:27:01.069834822 +0000 UTC m=+510.567935262 I0420 14:27:01.070566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:01.075004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5c5tq" condition "Approved" to 2026-04-20 14:27:01.074996382 +0000 UTC m=+510.573096802 I0420 14:27:01.084141 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:01.084129783 +0000 UTC m=+510.582230203 I0420 14:27:01.095003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rz798" condition "Ready" to 2026-04-20 14:27:01.094994131 +0000 UTC m=+510.593094551 I0420 14:27:01.102607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5c5tq" condition "Ready" to 2026-04-20 14:27:01.102600379 +0000 UTC m=+510.600700799 I0420 14:27:01.124946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:01.129164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:01.129428 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:01.129422654 +0000 UTC m=+510.627523084 I0420 14:27:01.230740 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:01.23073105 +0000 UTC m=+510.728831470 I0420 14:27:01.246211 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:01.246197578 +0000 UTC m=+510.744298008 I0420 14:27:01.293812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:01.294498 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:01.294490284 +0000 UTC m=+510.792590714 I0420 14:27:01.393364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:01.393853 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:01.393846991 +0000 UTC m=+510.891947421 I0420 14:27:02.103293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:02.103542 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:02.10353762 +0000 UTC m=+511.601638040 I0420 14:27:02.250293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:02.257037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:02.260253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:38.929374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:27:38.929431 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls" condition "Ready" to 2026-04-20 14:27:38.929382026 +0000 UTC m=+548.427482466 I0420 14:27:38.929443 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls" condition "Issuing" to 2026-04-20 14:27:38.929426567 +0000 UTC m=+548.427527037 I0420 14:27:39.069602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:39.079668 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls" condition "Ready" to 2026-04-20 14:27:39.079649421 +0000 UTC m=+548.577749911 I0420 14:27:40.073101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:40.600495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ngpjx-h5d9l" condition "Approved" to 2026-04-20 14:27:40.600483114 +0000 UTC m=+550.098583544 I0420 14:27:40.967762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ngpjx-h5d9l" condition "Ready" to 2026-04-20 14:27:40.967752507 +0000 UTC m=+550.465852917 I0420 14:27:42.438333 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:42.438314979 +0000 UTC m=+551.936415429 I0420 14:27:42.782102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:42.782400 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:42.782393126 +0000 UTC m=+552.280493556 I0420 14:27:44.173176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngpjx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:17.685850 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 14:28:17.68582341 +0000 UTC m=+587.183923860 I0420 14:28:17.685965 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:28:17.686023 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 14:28:17.686011562 +0000 UTC m=+587.184112022 I0420 14:28:17.734096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:17.734283 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 14:28:17.73427056 +0000 UTC m=+587.232371010 I0420 14:28:17.919099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:17.954670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vx8zf" condition "Approved" to 2026-04-20 14:28:17.954654541 +0000 UTC m=+587.452754971 I0420 14:28:17.973982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vx8zf" condition "Ready" to 2026-04-20 14:28:17.973967378 +0000 UTC m=+587.472067808 I0420 14:28:18.066968 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:28:18.066955602 +0000 UTC m=+587.565056022 I0420 14:28:18.093674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:18.094038 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:28:18.094026985 +0000 UTC m=+587.592127425 I0420 14:28:18.121034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:32:34.750293 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 14:32:34.750271455 +0000 UTC m=+844.248371895 I0420 14:32:34.750419 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:32:34.750609 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 14:32:34.750597874 +0000 UTC m=+844.248698344 I0420 14:32:34.773178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:32:34.773313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:32:34.774426 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 14:32:34.774416021 +0000 UTC m=+844.272516471 I0420 14:32:35.388394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:32:35.402895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pswqn" condition "Approved" to 2026-04-20 14:32:35.402880641 +0000 UTC m=+844.900981151 I0420 14:32:35.422785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pswqn" condition "Ready" to 2026-04-20 14:32:35.422773324 +0000 UTC m=+844.920873754 I0420 14:32:35.464032 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:32:35.464014422 +0000 UTC m=+844.962114862 I0420 14:32:35.488267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:20.883815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:33:20.883911 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 14:33:20.883873375 +0000 UTC m=+890.381973825 I0420 14:33:20.884079 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 14:33:20.88406463 +0000 UTC m=+890.382165060 I0420 14:33:20.901075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:20.901183 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 14:33:20.90117589 +0000 UTC m=+890.399276320 I0420 14:33:21.156662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:21.192639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6x5tq" condition "Approved" to 2026-04-20 14:33:21.192628789 +0000 UTC m=+890.690729219 I0420 14:33:21.212674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6x5tq" condition "Ready" to 2026-04-20 14:33:21.212661358 +0000 UTC m=+890.710761818 I0420 14:33:21.244009 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:33:21.24397322 +0000 UTC m=+890.742073650 I0420 14:33:21.270010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:21.270303 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:33:21.270297007 +0000 UTC m=+890.768397437 I0420 14:33:21.287846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:21.288057 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:33:21.288051863 +0000 UTC m=+890.786152273