I0416 16:28:00.795480 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0416 16:28:00.795643 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0416 16:28:00.795742 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0416 16:28:00.801558 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0416 16:28:00.801938 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0416 16:28:00.802063 1 controller.go:156] "cert-manager/controller: starting leader election" I0416 16:28:00.802076 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0416 16:28:00.804743 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0416 16:28:00.814857 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0416 16:28:00.819541 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0416 16:28:00.822745 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0416 16:28:00.825297 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0416 16:28:00.825317 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0416 16:28:00.825386 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0416 16:28:00.827850 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0416 16:28:00.831586 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0416 16:28:00.834858 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0416 16:28:00.835023 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0416 16:28:00.837525 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0416 16:28:00.837584 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0416 16:28:00.839997 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0416 16:28:00.842328 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0416 16:28:00.843845 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0416 16:28:00.845701 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0416 16:28:00.847414 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0416 16:28:00.849043 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0416 16:28:00.852048 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0416 16:28:00.857876 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0416 16:28:00.861898 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0416 16:28:00.865774 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0416 16:28:00.867564 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0416 16:28:00.867582 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0416 16:28:00.867863 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0416 16:28:12.656942 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 16:28:12.656911636 +0000 UTC m=+11.889390760 I0416 16:28:13.382573 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:28:13.382606 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 16:28:13.382599721 +0000 UTC m=+12.615078825 I0416 16:28:13.385371 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 16:28:13.385355719 +0000 UTC m=+12.617834813 I0416 16:28:13.405992 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:28:13.406146 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 16:28:13.406135735 +0000 UTC m=+12.638614849 E0416 16:28:13.406174 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:28:13.406337 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 16:28:13.406322448 +0000 UTC m=+12.638801552 E0416 16:28:13.406394 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:28:13.427929 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0416 16:28:13.428716 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:28:13.429615 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:28:13.429706 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0416 16:28:13.432810 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:28:13.459407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vtqlg" condition "Approved" to 2026-04-16 16:28:13.459393062 +0000 UTC m=+12.691872186 I0416 16:28:13.475207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vtqlg" condition "Ready" to 2026-04-16 16:28:13.47519322 +0000 UTC m=+12.707672314 I0416 16:28:13.495638 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:28:13.49562704 +0000 UTC m=+12.728106144 I0416 16:28:13.516880 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:28:13.517142 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:28:13.517136269 +0000 UTC m=+12.749615353 I0416 16:28:13.531997 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:28:13.532286 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:28:13.532277365 +0000 UTC m=+12.764756459 I0416 16:28:18.431032 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:28:18.431016792 +0000 UTC m=+17.663495876 I0416 16:28:39.515843 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:28:39.516158 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 16:28:39.516151365 +0000 UTC m=+38.748630459 I0416 16:28:39.515884 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 16:28:39.515872461 +0000 UTC m=+38.748351555 I0416 16:28:39.528172 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 16:28:39.528156464 +0000 UTC m=+38.760635558 I0416 16:28:39.549115 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:28:39.549214 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:28:39.549249 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 16:28:39.549244104 +0000 UTC m=+38.781723188 I0416 16:28:39.742672 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:28:39.752768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vpmbg" condition "Approved" to 2026-04-16 16:28:39.752756464 +0000 UTC m=+38.985235558 I0416 16:28:39.780135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vpmbg" condition "Ready" to 2026-04-16 16:28:39.780123333 +0000 UTC m=+39.012602427 I0416 16:28:39.816779 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:28:39.816764497 +0000 UTC m=+39.049243591 I0416 16:28:39.840803 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:28:39.841350 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:28:39.841342033 +0000 UTC m=+39.073821127 I0416 16:28:39.857930 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:28:39.858379 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:28:39.85837215 +0000 UTC m=+39.090851244 I0416 16:31:23.729692 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-213.nip.io-tls" condition "Ready" to 2026-04-16 16:31:23.72966896 +0000 UTC m=+202.962148044 I0416 16:31:23.730308 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-213.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:31:23.730330 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-213.nip.io-tls" condition "Issuing" to 2026-04-16 16:31:23.730326613 +0000 UTC m=+202.962805707 I0416 16:31:23.746956 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-213.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-213.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:23.747069 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-213.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:31:23.747174 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-213.nip.io-tls" condition "Issuing" to 2026-04-16 16:31:23.747166639 +0000 UTC m=+202.979645723 I0416 16:31:24.205114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-213.nip.io-tls-49rcz" condition "Approved" to 2026-04-16 16:31:24.205098087 +0000 UTC m=+203.437577181 I0416 16:31:24.234628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-213.nip.io-tls-49rcz" condition "Ready" to 2026-04-16 16:31:24.234613065 +0000 UTC m=+203.467092179 I0416 16:31:24.264312 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-213.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:24.264277428 +0000 UTC m=+203.496756522 I0416 16:31:24.281381 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-213.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-213.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:24.281930 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-213.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:24.281924799 +0000 UTC m=+203.514403893 I0416 16:31:24.305752 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-213.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-213.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:24.306390 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-213.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:24.306369499 +0000 UTC m=+203.538848583 I0416 16:32:20.054126 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:32:20.054292 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 16:32:20.054264275 +0000 UTC m=+259.286743389 I0416 16:32:20.054678 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 16:32:20.054249414 +0000 UTC m=+259.286728528 E0416 16:32:20.069121 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:32:20.069161 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-16 16:32:20.069153686 +0000 UTC m=+259.301632780 E0416 16:32:20.069227 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:32:20.073998 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:32:20.074153 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 16:32:20.074119297 +0000 UTC m=+259.306598391 E0416 16:32:20.092234 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0416 16:32:20.092442 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:32:20.092496 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:32:20.092575 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0416 16:32:20.093957 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:32:20.112094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k48nv" condition "Approved" to 2026-04-16 16:32:20.112080552 +0000 UTC m=+259.344559646 I0416 16:32:20.123443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k48nv" condition "Ready" to 2026-04-16 16:32:20.123426683 +0000 UTC m=+259.355905777 I0416 16:32:20.145890 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:32:20.145869188 +0000 UTC m=+259.378348282 I0416 16:32:20.169865 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:32:20.213409 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:32:25.093328 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:32:25.093307837 +0000 UTC m=+264.325786961 I0416 16:33:06.273875 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:33:06.273820714 +0000 UTC m=+305.506299798 I0416 16:33:06.274060 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:33:06.274171 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 16:33:06.274104131 +0000 UTC m=+305.506583225 I0416 16:33:06.279668 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:33:06.280137 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 16:33:06.280121298 +0000 UTC m=+305.512600392 I0416 16:33:06.280456 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 16:33:06.280443446 +0000 UTC m=+305.512922530 I0416 16:33:06.281776 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:33:06.281823 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 16:33:06.2818186 +0000 UTC m=+305.514297684 I0416 16:33:06.279695 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 16:33:06.279689668 +0000 UTC m=+305.512168752 I0416 16:33:06.326390 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:06.326561 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:06.326784 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:06.326847 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:33:06.326839745 +0000 UTC m=+305.559318839 I0416 16:33:06.327495 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 16:33:06.32748476 +0000 UTC m=+305.559963844 I0416 16:33:06.328046 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:33:06.328078 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 16:33:06.328072125 +0000 UTC m=+305.560551229 I0416 16:33:06.505167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lfxjs" condition "Approved" to 2026-04-16 16:33:06.5051579 +0000 UTC m=+305.737636984 I0416 16:33:06.521848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lfxjs" condition "Ready" to 2026-04-16 16:33:06.521837539 +0000 UTC m=+305.754316623 I0416 16:33:06.553124 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:33:06.553108187 +0000 UTC m=+305.785587311 I0416 16:33:06.606005 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:06.611240 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:06.653603 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:06.738327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zfvkz" condition "Approved" to 2026-04-16 16:33:06.738317051 +0000 UTC m=+305.970796135 I0416 16:33:06.744017 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:06.765415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zfvkz" condition "Ready" to 2026-04-16 16:33:06.765401416 +0000 UTC m=+305.997880510 I0416 16:33:06.908631 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:33:06.90861549 +0000 UTC m=+306.141094584 I0416 16:33:07.014619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bl2jh" condition "Approved" to 2026-04-16 16:33:07.01460304 +0000 UTC m=+306.247082154 I0416 16:33:07.106124 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:07.106936 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:33:07.106925839 +0000 UTC m=+306.339404933 I0416 16:33:07.277931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bl2jh" condition "Ready" to 2026-04-16 16:33:07.277915923 +0000 UTC m=+306.510395037 I0416 16:33:07.668861 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:33:07.668846099 +0000 UTC m=+306.901325193 I0416 16:33:07.858266 1 issuing_controller.go:324] "cert-manager/certificates-issuing: next private key does not match CSR public key, waiting for requestmanager controller" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-bl2jh" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-g6w7s" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0416 16:33:07.905861 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:07.957489 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0416 16:33:08.154806 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"prometheus-tls-g6w7s\" already exists" key="monitoring/prometheus-tls" I0416 16:33:08.216240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-twsm8" condition "Approved" to 2026-04-16 16:33:08.216030414 +0000 UTC m=+307.448509498 I0416 16:33:08.321576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-twsm8" condition "Ready" to 2026-04-16 16:33:08.321560899 +0000 UTC m=+307.554040013 I0416 16:33:08.756920 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:33:08.756907322 +0000 UTC m=+307.989386416 I0416 16:33:08.859308 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:08.859950 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:33:08.859943886 +0000 UTC m=+308.092422980 I0416 16:33:09.058033 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:14.822784 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls" condition "Ready" to 2026-04-16 16:33:14.822770018 +0000 UTC m=+314.055249102 I0416 16:33:14.822920 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:33:14.822952 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls" condition "Issuing" to 2026-04-16 16:33:14.822945612 +0000 UTC m=+314.055424696 I0416 16:33:14.839054 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:14.839144 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls" condition "Ready" to 2026-04-16 16:33:14.8391156 +0000 UTC m=+314.071594694 I0416 16:33:15.050935 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:15.088673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5dhdw-9qr5t" condition "Approved" to 2026-04-16 16:33:15.088658676 +0000 UTC m=+314.321137760 I0416 16:33:15.115287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5dhdw-9qr5t" condition "Ready" to 2026-04-16 16:33:15.115277053 +0000 UTC m=+314.347756147 I0416 16:33:15.150915 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:33:15.150901947 +0000 UTC m=+314.383381051 I0416 16:33:15.224456 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:15.285138 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dhdw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:26.783540 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 16:33:26.783513155 +0000 UTC m=+326.015992239 I0416 16:33:26.783587 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:33:26.783617 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 16:33:26.783609597 +0000 UTC m=+326.016088691 I0416 16:33:26.815789 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:33:26.815868 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:33:26.815885 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 16:33:26.815878978 +0000 UTC m=+326.048358062 I0416 16:33:27.171079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gwk4f" condition "Approved" to 2026-04-16 16:33:27.171053906 +0000 UTC m=+326.403533000 I0416 16:33:27.200973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gwk4f" condition "Ready" to 2026-04-16 16:33:27.20095096 +0000 UTC m=+326.433430044 I0416 16:33:27.241928 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:33:27.241909831 +0000 UTC m=+326.474388925 I0416 16:33:27.261977 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:33.942072 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:33.942173 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 16:36:33.94214003 +0000 UTC m=+513.174619154 I0416 16:36:33.943658 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 16:36:33.943648816 +0000 UTC m=+513.176127930 I0416 16:36:33.962702 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:33.962777 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 16:36:33.962769102 +0000 UTC m=+513.195248206 I0416 16:36:34.099411 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:34.136086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-s792j" condition "Approved" to 2026-04-16 16:36:34.136056555 +0000 UTC m=+513.368535689 I0416 16:36:34.157765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-s792j" condition "Ready" to 2026-04-16 16:36:34.157754516 +0000 UTC m=+513.390233600 I0416 16:36:34.187963 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:34.187919005 +0000 UTC m=+513.420398099 I0416 16:36:34.209511 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:34.210042 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:34.210035053 +0000 UTC m=+513.442514137 I0416 16:36:34.229262 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:37:15.164248 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 16:37:15.164213755 +0000 UTC m=+554.396692879 I0416 16:37:15.165273 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:37:15.165440 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-16 16:37:15.165306423 +0000 UTC m=+554.397785557 I0416 16:37:15.183242 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:37:15.183428 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:37:15.183455 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-16 16:37:15.183451023 +0000 UTC m=+554.415930117 I0416 16:37:15.447975 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:37:15.453857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jpj4c" condition "Approved" to 2026-04-16 16:37:15.453840342 +0000 UTC m=+554.686319436 I0416 16:37:15.489086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jpj4c" condition "Ready" to 2026-04-16 16:37:15.489078994 +0000 UTC m=+554.721558078 I0416 16:37:15.530191 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:37:15.530171367 +0000 UTC m=+554.762650481 I0416 16:37:15.555462 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:37:15.556151 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:37:15.55614147 +0000 UTC m=+554.788620574 I0416 16:37:15.583563 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:37:15.584270 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:37:15.584260861 +0000 UTC m=+554.816739945