I0415 08:57:51.641123 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0415 08:57:51.641404 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0415 08:57:51.641579 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0415 08:57:51.648946 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0415 08:57:51.649248 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0415 08:57:51.649366 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0415 08:57:51.649392 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0415 08:57:51.651001 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0415 08:57:51.671208 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0415 08:57:51.675062 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0415 08:57:51.678070 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0415 08:57:51.685632 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0415 08:57:51.686492 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0415 08:57:51.688880 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0415 08:57:51.688978 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0415 08:57:51.690853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0415 08:57:51.692737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0415 08:57:51.694331 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0415 08:57:51.696408 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0415 08:57:51.701194 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0415 08:57:51.703841 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0415 08:57:51.703877 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0415 08:57:51.703940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0415 08:57:51.706472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0415 08:57:51.708966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0415 08:57:51.711484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0415 08:57:51.714054 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0415 08:57:51.716484 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0415 08:57:51.716516 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0415 08:57:51.716554 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0415 08:57:51.719405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0415 08:57:51.721985 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0415 08:57:51.723288 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0415 08:57:51.726939 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 08:57:51.727353 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 08:57:51.727900 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 08:57:51.728286 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 08:57:51.728591 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 08:57:51.728646 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 08:57:51.729167 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 08:57:51.729337 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 08:57:51.730131 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 08:57:51.819789 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 08:58:04.109279 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-15 08:58:04.109264088 +0000 UTC m=+12.508631897 I0415 08:58:04.932164 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-15 08:58:04.93214658 +0000 UTC m=+13.331514389 I0415 08:58:04.932292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 08:58:04.932347 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-15 08:58:04.932340076 +0000 UTC m=+13.331707855 E0415 08:58:04.944954 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0415 08:58:04.945032 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-15 08:58:04.945024625 +0000 UTC m=+13.344392404 E0415 08:58:04.945060 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0415 08:58:04.946886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 08:58:04.946954 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 08:58:04.946986 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-15 08:58:04.946978505 +0000 UTC m=+13.346346294 E0415 08:58:04.960010 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0415 08:58:04.960077 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0415 08:58:04.960104 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0415 08:58:04.960137 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0415 08:58:04.982975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 08:58:04.986773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hck87" condition "Approved" to 2026-04-15 08:58:04.98676029 +0000 UTC m=+13.386128089 I0415 08:58:04.999597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hck87" condition "Ready" to 2026-04-15 08:58:04.999587592 +0000 UTC m=+13.398955371 I0415 08:58:05.020030 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 08:58:05.020022132 +0000 UTC m=+13.419389911 I0415 08:58:05.041759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 08:58:05.080095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 08:58:09.960633 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 08:58:09.960615587 +0000 UTC m=+18.359983386 I0415 08:58:32.182811 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-15 08:58:32.182770125 +0000 UTC m=+40.582137904 I0415 08:58:32.183983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 08:58:32.184077 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-15 08:58:32.184069383 +0000 UTC m=+40.583437162 I0415 08:58:32.195636 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-15 08:58:32.195617464 +0000 UTC m=+40.594985243 I0415 08:58:32.202928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0415 08:58:32.203020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 08:58:32.203053 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-15 08:58:32.20304649 +0000 UTC m=+40.602414259 I0415 08:58:32.653299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0415 08:58:32.656716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7wwzm" condition "Approved" to 2026-04-15 08:58:32.656708318 +0000 UTC m=+41.056076107 I0415 08:58:32.678561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7wwzm" condition "Ready" to 2026-04-15 08:58:32.678544569 +0000 UTC m=+41.077912348 I0415 08:58:32.715852 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 08:58:32.715837017 +0000 UTC m=+41.115204796 I0415 08:58:32.730335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0415 08:58:32.730805 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 08:58:32.730795714 +0000 UTC m=+41.130163503 I0415 08:58:32.760919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:02:41.340858 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready" to 2026-04-15 09:02:41.340827509 +0000 UTC m=+289.740195288 I0415 09:02:41.344591 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:02:41.344634 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-04-15 09:02:41.34461095 +0000 UTC m=+289.743978729 I0415 09:02:41.357205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:02:41.357341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:02:41.357472 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-04-15 09:02:41.357395016 +0000 UTC m=+289.756762805 I0415 09:02:41.529815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-dbqhh" condition "Approved" to 2026-04-15 09:02:41.529803919 +0000 UTC m=+289.929171698 I0415 09:02:41.558392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-dbqhh" condition "Ready" to 2026-04-15 09:02:41.558366591 +0000 UTC m=+289.957734400 I0415 09:02:41.586410 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:02:41.586394908 +0000 UTC m=+289.985762687 I0415 09:02:41.609963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:02:41.610214 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:02:41.61020779 +0000 UTC m=+290.009575559 I0415 09:02:41.626788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:03:45.905118 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-15 09:03:45.905077159 +0000 UTC m=+354.304444948 I0415 09:03:45.905301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:03:45.905352 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-15 09:03:45.905341355 +0000 UTC m=+354.304709154 E0415 09:03:45.916085 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0415 09:03:45.916128 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-15 09:03:45.916120686 +0000 UTC m=+354.315488455 E0415 09:03:45.916181 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0415 09:03:45.922510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:03:45.928807 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:03:45.928840 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-15 09:03:45.928831368 +0000 UTC m=+354.328199147 E0415 09:03:45.944463 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0415 09:03:45.944567 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0415 09:03:45.944588 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0415 09:03:45.944623 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0415 09:03:46.017913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-h98rp" condition "Approved" to 2026-04-15 09:03:46.017904188 +0000 UTC m=+354.417271947 I0415 09:03:46.029867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-h98rp" condition "Ready" to 2026-04-15 09:03:46.029857363 +0000 UTC m=+354.429225132 I0415 09:03:46.051765 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:03:46.051754182 +0000 UTC m=+354.451121961 I0415 09:03:46.076683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:03:46.077047 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:03:46.077037299 +0000 UTC m=+354.476405108 I0415 09:03:46.077716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:03:46.089227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:03:46.091298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:03:46.091529 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:03:46.091521426 +0000 UTC m=+354.490889205 I0415 09:03:50.944810 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:03:50.944801707 +0000 UTC m=+359.344169476 I0415 09:04:30.831356 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-15 09:04:30.831333031 +0000 UTC m=+399.230700800 I0415 09:04:30.831644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:04:30.831664 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-15 09:04:30.831661777 +0000 UTC m=+399.231029546 I0415 09:04:30.838993 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-15 09:04:30.838983465 +0000 UTC m=+399.238351234 I0415 09:04:30.844335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:04:30.844353 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-15 09:04:30.84434966 +0000 UTC m=+399.243717429 I0415 09:04:30.844587 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-15 09:04:30.844583744 +0000 UTC m=+399.243951513 I0415 09:04:30.844810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:04:30.844824 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-15 09:04:30.844821708 +0000 UTC m=+399.244189467 I0415 09:04:30.880207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:30.880262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:04:30.880291 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-15 09:04:30.880286074 +0000 UTC m=+399.279653843 I0415 09:04:30.889526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:30.889584 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:04:30.889604 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-15 09:04:30.889598587 +0000 UTC m=+399.288966356 I0415 09:04:30.891829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:30.891877 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-15 09:04:30.891872957 +0000 UTC m=+399.291240716 I0415 09:04:31.072169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8zsvj" condition "Approved" to 2026-04-15 09:04:31.072154923 +0000 UTC m=+399.471522732 I0415 09:04:31.088779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8zsvj" condition "Ready" to 2026-04-15 09:04:31.088769555 +0000 UTC m=+399.488137334 I0415 09:04:31.131971 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:04:31.131962753 +0000 UTC m=+399.531330512 I0415 09:04:31.159407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:31.159721 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:04:31.159715431 +0000 UTC m=+399.559083210 I0415 09:04:31.173046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:31.201405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:31.228295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:31.261483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r7xg6" condition "Approved" to 2026-04-15 09:04:31.261471979 +0000 UTC m=+399.660839758 I0415 09:04:31.275889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bxb8q" condition "Approved" to 2026-04-15 09:04:31.275877772 +0000 UTC m=+399.675245541 I0415 09:04:31.283363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r7xg6" condition "Ready" to 2026-04-15 09:04:31.283338173 +0000 UTC m=+399.682705952 I0415 09:04:31.333421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bxb8q" condition "Ready" to 2026-04-15 09:04:31.333410623 +0000 UTC m=+399.732778382 I0415 09:04:31.868435 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:04:31.868404555 +0000 UTC m=+400.267772364 I0415 09:04:31.964576 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:04:31.964565084 +0000 UTC m=+400.363932863 I0415 09:04:32.062689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:32.062973 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:04:32.06296811 +0000 UTC m=+400.462335879 I0415 09:04:32.171549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:32.463653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:32.512664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:32.812726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:38.921847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:04:38.921884 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls" condition "Issuing" to 2026-04-15 09:04:38.92187362 +0000 UTC m=+407.321241399 I0415 09:04:38.921908 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls" condition "Ready" to 2026-04-15 09:04:38.92189127 +0000 UTC m=+407.321259049 I0415 09:04:38.937953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:38.938049 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls" condition "Ready" to 2026-04-15 09:04:38.938037138 +0000 UTC m=+407.337404907 I0415 09:04:39.087173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:39.119885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pvkt7-wlkdv" condition "Approved" to 2026-04-15 09:04:39.11987743 +0000 UTC m=+407.519245199 I0415 09:04:39.140046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pvkt7-wlkdv" condition "Ready" to 2026-04-15 09:04:39.140036427 +0000 UTC m=+407.539404196 I0415 09:04:39.167721 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:04:39.167707981 +0000 UTC m=+407.567075760 I0415 09:04:39.187596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pvkt7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:51.779539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:04:51.779577 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-15 09:04:51.779564502 +0000 UTC m=+420.178932281 I0415 09:04:51.779875 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-15 09:04:51.779870517 +0000 UTC m=+420.179238296 I0415 09:04:51.817889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:51.817952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:04:51.817966 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-15 09:04:51.817961557 +0000 UTC m=+420.217329326 I0415 09:04:52.082816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:04:52.083133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fzx6j" condition "Approved" to 2026-04-15 09:04:52.083120819 +0000 UTC m=+420.482488598 I0415 09:04:52.102236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fzx6j" condition "Ready" to 2026-04-15 09:04:52.102222884 +0000 UTC m=+420.501590663 I0415 09:04:52.127666 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:04:52.127657095 +0000 UTC m=+420.527024864 I0415 09:04:52.147941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:08:01.390722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:08:01.390773 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-15 09:08:01.390766606 +0000 UTC m=+609.790134365 I0415 09:08:01.391133 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-15 09:08:01.39111443 +0000 UTC m=+609.790482229 I0415 09:08:01.407086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:08:01.407163 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-15 09:08:01.407155443 +0000 UTC m=+609.806523222 I0415 09:08:01.511678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:08:01.534618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-k5lhp" condition "Approved" to 2026-04-15 09:08:01.534599785 +0000 UTC m=+609.933967564 I0415 09:08:01.558145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-k5lhp" condition "Ready" to 2026-04-15 09:08:01.558133988 +0000 UTC m=+609.957501767 I0415 09:08:01.586343 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:08:01.586328486 +0000 UTC m=+609.985696265 I0415 09:08:01.609812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:08:01.610042 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:08:01.610037012 +0000 UTC m=+610.009404781 I0415 09:08:01.631432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:08:01.631761 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:08:01.631753012 +0000 UTC m=+610.031120791 I0415 09:08:01.636896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:08:40.738269 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-15 09:08:40.738253774 +0000 UTC m=+649.137621573 I0415 09:08:40.739333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 09:08:40.739367 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-15 09:08:40.739359917 +0000 UTC m=+649.138727686 I0415 09:08:40.761354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:08:40.761493 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-15 09:08:40.761484895 +0000 UTC m=+649.160852674 I0415 09:08:40.850826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:08:40.886469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f5xs2" condition "Approved" to 2026-04-15 09:08:40.886455404 +0000 UTC m=+649.285823183 I0415 09:08:40.903039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f5xs2" condition "Ready" to 2026-04-15 09:08:40.903024157 +0000 UTC m=+649.302391936 I0415 09:08:40.928765 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:08:40.928753497 +0000 UTC m=+649.328121266 I0415 09:08:40.944929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:08:40.945894 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 09:08:40.945883917 +0000 UTC m=+649.345251706 I0415 09:08:40.956425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 09:08:40.965124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"