I0421 21:12:23.426865 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0421 21:12:23.426958 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0421 21:12:23.427021 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0421 21:12:23.430793 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0421 21:12:23.431194 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0421 21:12:23.431842 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0421 21:12:23.431796 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0421 21:12:23.436097 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0421 21:12:23.448394 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0421 21:12:23.451883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0421 21:12:23.454422 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0421 21:12:23.454453 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0421 21:12:23.454559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0421 21:12:23.457231 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0421 21:12:23.461808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0421 21:12:23.464988 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0421 21:12:23.467715 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0421 21:12:23.470367 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0421 21:12:23.472874 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0421 21:12:23.472931 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0421 21:12:23.472983 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0421 21:12:23.472990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0421 21:12:23.475545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0421 21:12:23.477262 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0421 21:12:23.482990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0421 21:12:23.486740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0421 21:12:23.489081 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0421 21:12:23.491348 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0421 21:12:23.493718 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0421 21:12:23.496026 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0421 21:12:23.498545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0421 21:12:23.500201 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0421 21:12:23.500251 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0421 21:12:23.505314 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 21:12:23.505533 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 21:12:23.506084 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 21:12:23.506309 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 21:12:23.508341 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 21:12:23.508397 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 21:12:23.508832 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 21:12:23.508828 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 21:12:23.509497 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 21:12:23.585385 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 21:12:36.391046 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 21:12:36.391031063 +0000 UTC m=+12.993135821 I0421 21:12:37.085627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:12:37.085670 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 21:12:37.085661099 +0000 UTC m=+13.687765877 I0421 21:12:37.085745 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 21:12:37.085643439 +0000 UTC m=+13.687748197 I0421 21:12:37.099420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:12:37.099501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:12:37.099529 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 21:12:37.099520575 +0000 UTC m=+13.701625353 E0421 21:12:37.102344 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 21:12:37.102517 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 21:12:37.102509278 +0000 UTC m=+13.704614046 E0421 21:12:37.102596 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 21:12:37.117122 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0421 21:12:37.117271 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 21:12:37.117298 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 21:12:37.117365 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0421 21:12:37.131696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:12:37.134807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fp6xv" condition "Approved" to 2026-04-21 21:12:37.134798238 +0000 UTC m=+13.736903006 I0421 21:12:37.146390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fp6xv" condition "Ready" to 2026-04-21 21:12:37.146381365 +0000 UTC m=+13.748486123 I0421 21:12:37.168120 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:12:37.168104914 +0000 UTC m=+13.770209692 I0421 21:12:37.188857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:12:37.233458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:12:42.117824 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:12:42.117811457 +0000 UTC m=+18.719916245 I0421 21:13:03.117123 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 21:13:03.117054728 +0000 UTC m=+39.719159486 I0421 21:13:03.118514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:13:03.118609 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 21:13:03.118597654 +0000 UTC m=+39.720702402 I0421 21:13:03.130732 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 21:13:03.130720991 +0000 UTC m=+39.732825739 I0421 21:13:03.154468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:13:03.154556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:13:03.154598 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 21:13:03.154578274 +0000 UTC m=+39.756683032 I0421 21:13:03.436507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jq6m9" condition "Approved" to 2026-04-21 21:13:03.436429871 +0000 UTC m=+40.038534639 I0421 21:13:03.470360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jq6m9" condition "Ready" to 2026-04-21 21:13:03.470347434 +0000 UTC m=+40.072452182 I0421 21:13:03.499688 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:13:03.49967262 +0000 UTC m=+40.101777368 I0421 21:13:03.532201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:13:03.532699 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:13:03.532689298 +0000 UTC m=+40.134794076 I0421 21:13:03.557097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:13:03.557569 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:13:03.557556776 +0000 UTC m=+40.159661554 I0421 21:17:34.970888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:17:34.970931 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Issuing" to 2026-04-21 21:17:34.970920992 +0000 UTC m=+311.573025770 I0421 21:17:34.971017 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-04-21 21:17:34.971001285 +0000 UTC m=+311.573106063 I0421 21:17:34.989408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:17:34.989489 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-04-21 21:17:34.989481451 +0000 UTC m=+311.591586209 I0421 21:17:35.154589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:17:35.182715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-jgjrs" condition "Approved" to 2026-04-21 21:17:35.182705072 +0000 UTC m=+311.784809830 I0421 21:17:35.210354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-jgjrs" condition "Ready" to 2026-04-21 21:17:35.210344425 +0000 UTC m=+311.812449173 I0421 21:17:35.238397 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:17:35.238389395 +0000 UTC m=+311.840494143 I0421 21:17:35.261312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:18:37.774713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:18:37.774798 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 21:18:37.774782382 +0000 UTC m=+374.376887150 I0421 21:18:37.775568 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 21:18:37.77398998 +0000 UTC m=+374.376094758 E0421 21:18:37.791557 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 21:18:37.792727 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-21 21:18:37.792705754 +0000 UTC m=+374.394810502 E0421 21:18:37.792837 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 21:18:37.795044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:18:37.795104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:18:37.795120 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 21:18:37.79511529 +0000 UTC m=+374.397220038 E0421 21:18:37.859573 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0421 21:18:37.860757 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 21:18:37.860793 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 21:18:37.860843 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0421 21:18:37.927030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:18:37.930833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-g6t8s" condition "Approved" to 2026-04-21 21:18:37.930819538 +0000 UTC m=+374.532924286 I0421 21:18:37.947684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-g6t8s" condition "Ready" to 2026-04-21 21:18:37.94766909 +0000 UTC m=+374.549773838 I0421 21:18:37.974812 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:18:37.974794176 +0000 UTC m=+374.576898924 I0421 21:18:37.995119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:18:37.995563 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:18:37.995541355 +0000 UTC m=+374.597646103 I0421 21:18:38.011230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:18:38.011846 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:18:38.011831872 +0000 UTC m=+374.613936630 I0421 21:18:42.860568 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:18:42.860554487 +0000 UTC m=+379.462659265 I0421 21:19:28.510354 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 21:19:28.510339613 +0000 UTC m=+425.112444371 I0421 21:19:28.511138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:19:28.511206 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 21:19:28.511198131 +0000 UTC m=+425.113302879 I0421 21:19:28.536490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:19:28.536526 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 21:19:28.536519659 +0000 UTC m=+425.138624397 I0421 21:19:28.536921 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 21:19:28.536902057 +0000 UTC m=+425.139006805 I0421 21:19:28.536978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:19:28.536995 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 21:19:28.536992139 +0000 UTC m=+425.139096887 I0421 21:19:28.537443 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 21:19:28.537439329 +0000 UTC m=+425.139544067 I0421 21:19:28.556520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:28.559522 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 21:19:28.559505687 +0000 UTC m=+425.161610485 I0421 21:19:28.591748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:28.591808 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 21:19:28.591801337 +0000 UTC m=+425.193906085 I0421 21:19:28.600297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:28.600885 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 21:19:28.600875364 +0000 UTC m=+425.202980122 I0421 21:19:28.778741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:28.792147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:28.831738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sdtbj" condition "Approved" to 2026-04-21 21:19:28.831724455 +0000 UTC m=+425.433829213 I0421 21:19:28.842365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-glzfj" condition "Approved" to 2026-04-21 21:19:28.842350225 +0000 UTC m=+425.444454973 I0421 21:19:28.857487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sdtbj" condition "Ready" to 2026-04-21 21:19:28.857474344 +0000 UTC m=+425.459579102 I0421 21:19:28.862872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-glzfj" condition "Ready" to 2026-04-21 21:19:28.86285848 +0000 UTC m=+425.464963248 I0421 21:19:28.899838 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:19:28.899809731 +0000 UTC m=+425.501914469 I0421 21:19:28.900327 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:19:28.900303481 +0000 UTC m=+425.502408239 I0421 21:19:28.931610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:28.932053 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:19:28.932046549 +0000 UTC m=+425.534151287 I0421 21:19:28.933501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:28.938144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:29.055864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:29.410421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:29.554138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hgl7t" condition "Approved" to 2026-04-21 21:19:29.554116147 +0000 UTC m=+426.156220895 I0421 21:19:29.762240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hgl7t" condition "Ready" to 2026-04-21 21:19:29.762227066 +0000 UTC m=+426.364331824 I0421 21:19:30.105460 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:19:30.105445733 +0000 UTC m=+426.707550491 I0421 21:19:30.200616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:30.200999 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:19:30.200988085 +0000 UTC m=+426.803092843 I0421 21:19:30.398845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:30.501004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:45.435920 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:19:45.435933 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" condition "Ready" to 2026-04-21 21:19:45.435907481 +0000 UTC m=+442.038012249 I0421 21:19:45.435970 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" condition "Issuing" to 2026-04-21 21:19:45.435959602 +0000 UTC m=+442.038064360 I0421 21:19:45.463652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-96dhk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:45.463760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:19:45.463796 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" condition "Issuing" to 2026-04-21 21:19:45.463787473 +0000 UTC m=+442.065892241 I0421 21:19:45.875232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-96dhk-drwl5" condition "Approved" to 2026-04-21 21:19:45.875217922 +0000 UTC m=+442.477322680 I0421 21:19:45.904576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-96dhk-drwl5" condition "Ready" to 2026-04-21 21:19:45.904025494 +0000 UTC m=+442.506130262 I0421 21:19:45.946984 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:19:45.94694059 +0000 UTC m=+442.549045368 I0421 21:19:45.975696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-96dhk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:45.976073 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:19:45.976063778 +0000 UTC m=+442.578168536 I0421 21:19:46.000679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-96dhk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:46.001069 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-96dhk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:19:46.001058733 +0000 UTC m=+442.603163511 I0421 21:19:50.997415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:19:50.997463 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 21:19:50.997440607 +0000 UTC m=+447.599545355 I0421 21:19:50.997568 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 21:19:50.997547949 +0000 UTC m=+447.599652697 I0421 21:19:51.024498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:51.024653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:19:51.024683 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 21:19:51.024674374 +0000 UTC m=+447.626779132 I0421 21:19:51.335766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:19:51.343009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rtdbc" condition "Approved" to 2026-04-21 21:19:51.342984791 +0000 UTC m=+447.945089919 I0421 21:19:51.371322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rtdbc" condition "Ready" to 2026-04-21 21:19:51.371307469 +0000 UTC m=+447.973412217 I0421 21:19:51.402950 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:19:51.402907143 +0000 UTC m=+448.005011891 I0421 21:19:51.430369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:22:56.522905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:22:56.522966 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 21:22:56.522955375 +0000 UTC m=+633.125060123 I0421 21:22:56.523043 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 21:22:56.522930615 +0000 UTC m=+633.125035423 I0421 21:22:56.544530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:22:56.544632 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 21:22:56.544622289 +0000 UTC m=+633.146727047 I0421 21:22:56.745520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:22:56.789039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7m5q9" condition "Approved" to 2026-04-21 21:22:56.789021915 +0000 UTC m=+633.391126673 I0421 21:22:56.809126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7m5q9" condition "Ready" to 2026-04-21 21:22:56.809099559 +0000 UTC m=+633.411204317 I0421 21:22:56.851013 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:22:56.85099114 +0000 UTC m=+633.453095888 I0421 21:22:56.881125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:22:56.881464 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:22:56.881458171 +0000 UTC m=+633.483562919 I0421 21:22:56.897502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:22:56.910293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:22:56.910567 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:22:56.910557765 +0000 UTC m=+633.512662513 I0421 21:23:36.682761 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 21:23:36.68274541 +0000 UTC m=+673.284850168 I0421 21:23:36.683143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:23:36.684981 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-21 21:23:36.684970516 +0000 UTC m=+673.287075274 I0421 21:23:36.701625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:23:36.701968 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 21:23:36.702102 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-21 21:23:36.702093693 +0000 UTC m=+673.304198451 I0421 21:23:36.922831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qvqwk" condition "Approved" to 2026-04-21 21:23:36.922819174 +0000 UTC m=+673.524923922 I0421 21:23:36.946118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qvqwk" condition "Ready" to 2026-04-21 21:23:36.946097313 +0000 UTC m=+673.548202071 I0421 21:23:36.977149 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:23:36.977139391 +0000 UTC m=+673.579244139 I0421 21:23:37.010007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:23:37.010511 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 21:23:37.010499727 +0000 UTC m=+673.612604495 I0421 21:23:37.011507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 21:23:37.032865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"