I0414 13:55:37.937509 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0414 13:55:37.937593 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0414 13:55:37.937657 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0414 13:55:37.940118 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0414 13:55:37.940439 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0414 13:55:37.940569 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0414 13:55:37.940642 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0414 13:55:37.942504 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0414 13:55:37.956471 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0414 13:55:37.956938 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0414 13:55:37.965541 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0414 13:55:37.969064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0414 13:55:37.972558 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0414 13:55:37.974552 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0414 13:55:37.976411 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0414 13:55:37.976436 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0414 13:55:37.976548 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0414 13:55:37.978395 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0414 13:55:37.982859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0414 13:55:37.986896 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0414 13:55:37.990495 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0414 13:55:37.993299 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0414 13:55:37.993478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0414 13:55:37.995510 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0414 13:55:37.997314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0414 13:55:37.999170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0414 13:55:38.001023 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0414 13:55:38.007187 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0414 13:55:38.009836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0414 13:55:38.012603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0414 13:55:38.014247 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0414 13:55:38.014272 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0414 13:55:38.014311 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0414 13:55:38.017275 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:55:38.018146 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:55:38.018649 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:55:38.018655 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:55:38.019082 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:55:38.019350 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:55:38.019571 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:55:38.019822 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:55:38.020886 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:55:38.119997 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:55:48.587503 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-14 13:55:48.587479313 +0000 UTC m=+10.689891808 I0414 13:55:49.421155 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 13:55:49.421138432 +0000 UTC m=+11.523550927 I0414 13:55:49.421529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:55:49.421656 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 13:55:49.421640861 +0000 UTC m=+11.524053346 E0414 13:55:49.435963 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 13:55:49.436049 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-14 13:55:49.436040226 +0000 UTC m=+11.538452691 E0414 13:55:49.436074 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 13:55:49.449672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:55:49.449741 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 13:55:49.449731649 +0000 UTC m=+11.552144094 E0414 13:55:49.455771 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0414 13:55:49.456122 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 13:55:49.456290 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 13:55:49.456508 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0414 13:55:49.463814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:55:49.463881 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 13:55:49.463873879 +0000 UTC m=+11.566286334 I0414 13:55:49.470214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6bt8g" condition "Approved" to 2026-04-14 13:55:49.470204962 +0000 UTC m=+11.572617417 I0414 13:55:49.481819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6bt8g" condition "Ready" to 2026-04-14 13:55:49.48180978 +0000 UTC m=+11.584222245 I0414 13:55:49.506138 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:55:49.506117297 +0000 UTC m=+11.608529762 I0414 13:55:49.521596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:55:49.522225 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:55:49.522213009 +0000 UTC m=+11.624625494 I0414 13:55:49.535600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:55:54.456363 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:55:54.456332637 +0000 UTC m=+16.558745132 I0414 13:56:17.284495 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-14 13:56:17.284407042 +0000 UTC m=+39.386819507 I0414 13:56:17.284544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:56:17.284873 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 13:56:17.284860598 +0000 UTC m=+39.387273063 I0414 13:56:17.311106 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-14 13:56:17.311093348 +0000 UTC m=+39.413505803 I0414 13:56:17.396754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:56:17.396869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:56:17.396907 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 13:56:17.396899242 +0000 UTC m=+39.499311697 I0414 13:56:17.787312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rmcgb" condition "Approved" to 2026-04-14 13:56:17.787248176 +0000 UTC m=+39.889660641 I0414 13:56:17.818133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rmcgb" condition "Ready" to 2026-04-14 13:56:17.818115957 +0000 UTC m=+39.920528422 I0414 13:56:17.851280 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:56:17.851240109 +0000 UTC m=+39.953652574 I0414 13:56:17.876370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:56:17.937980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:00:24.633588 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-146.nip.io-tls" condition "Ready" to 2026-04-14 14:00:24.633563293 +0000 UTC m=+286.735975758 I0414 14:00:24.634087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-146.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:00:24.634111 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-146.nip.io-tls" condition "Issuing" to 2026-04-14 14:00:24.634107124 +0000 UTC m=+286.736519589 I0414 14:00:24.650369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-146.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-146.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:00:24.650449 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-146.nip.io-tls" condition "Ready" to 2026-04-14 14:00:24.650443042 +0000 UTC m=+286.752855527 I0414 14:00:24.897328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-146.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-146.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:00:24.923489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-146.nip.io-tls-g2fxp" condition "Approved" to 2026-04-14 14:00:24.923478041 +0000 UTC m=+287.025890506 I0414 14:00:24.950682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-146.nip.io-tls-g2fxp" condition "Ready" to 2026-04-14 14:00:24.950670563 +0000 UTC m=+287.053083028 I0414 14:00:24.976542 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-146.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:00:24.976530149 +0000 UTC m=+287.078942614 I0414 14:00:24.997520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-146.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-146.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:00:24.997890 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-146.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:00:24.997884312 +0000 UTC m=+287.100296767 I0414 14:00:25.016380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-146.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-146.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:28.522378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:01:28.522423 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 14:01:28.522415106 +0000 UTC m=+350.624827571 I0414 14:01:28.522843 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 14:01:28.522838204 +0000 UTC m=+350.625250659 E0414 14:01:28.532358 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 14:01:28.532395 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-14 14:01:28.532387604 +0000 UTC m=+350.634800059 E0414 14:01:28.532441 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 14:01:28.535971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:28.536062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:01:28.536084 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 14:01:28.536078176 +0000 UTC m=+350.638490641 E0414 14:01:28.544896 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0414 14:01:28.544991 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 14:01:28.545025 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 14:01:28.545058 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0414 14:01:28.567992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:28.570756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2qj8n" condition "Approved" to 2026-04-14 14:01:28.570746358 +0000 UTC m=+350.673158833 I0414 14:01:28.582675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2qj8n" condition "Ready" to 2026-04-14 14:01:28.582663078 +0000 UTC m=+350.685075543 I0414 14:01:28.609696 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:01:28.609683232 +0000 UTC m=+350.712095697 I0414 14:01:28.631369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:28.634990 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:01:28.634967217 +0000 UTC m=+350.737379682 I0414 14:01:28.646520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:28.647898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:28.648531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:28.648997 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:01:28.648984692 +0000 UTC m=+350.751397167 I0414 14:01:33.546061 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:01:33.546043343 +0000 UTC m=+355.648455838 I0414 14:02:12.369438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:02:12.369474 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 14:02:12.369468508 +0000 UTC m=+394.471880973 I0414 14:02:12.369897 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 14:02:12.369891944 +0000 UTC m=+394.472304399 I0414 14:02:12.370108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:02:12.370122 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 14:02:12.370118817 +0000 UTC m=+394.472531272 I0414 14:02:12.370298 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 14:02:12.37029448 +0000 UTC m=+394.472706935 I0414 14:02:12.370484 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 14:02:12.370479713 +0000 UTC m=+394.472892168 I0414 14:02:12.370749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:02:12.370772 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 14:02:12.370764157 +0000 UTC m=+394.473176612 I0414 14:02:12.433316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:12.433391 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:02:12.435275 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 14:02:12.435263666 +0000 UTC m=+394.537676171 I0414 14:02:12.435654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:12.435690 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 14:02:12.435686452 +0000 UTC m=+394.538098897 I0414 14:02:12.440280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:12.440355 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 14:02:12.440349343 +0000 UTC m=+394.542761788 I0414 14:02:12.536287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:12.562831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cbb8q" condition "Approved" to 2026-04-14 14:02:12.562820374 +0000 UTC m=+394.665232829 I0414 14:02:12.578355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cbb8q" condition "Ready" to 2026-04-14 14:02:12.578343846 +0000 UTC m=+394.680756311 I0414 14:02:12.601288 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:02:12.601275291 +0000 UTC m=+394.703687756 I0414 14:02:12.628981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:12.629791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:12.701826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rfc82" condition "Approved" to 2026-04-14 14:02:12.701817122 +0000 UTC m=+394.804229577 I0414 14:02:12.760825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rfc82" condition "Ready" to 2026-04-14 14:02:12.760816368 +0000 UTC m=+394.863228823 I0414 14:02:12.813489 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:02:12.81347759 +0000 UTC m=+394.915890045 I0414 14:02:12.841400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:12.841700 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:02:12.841694374 +0000 UTC m=+394.944106839 I0414 14:02:12.980254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:13.128762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:13.331618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:13.387384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6qt8k" condition "Approved" to 2026-04-14 14:02:13.387367311 +0000 UTC m=+395.489779776 I0414 14:02:13.486190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6qt8k" condition "Ready" to 2026-04-14 14:02:13.486180532 +0000 UTC m=+395.588592997 I0414 14:02:13.931288 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:02:13.931272966 +0000 UTC m=+396.033685441 I0414 14:02:14.029503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:14.029861 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:02:14.029851484 +0000 UTC m=+396.132263969 I0414 14:02:14.231995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:20.262283 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5fb85-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:02:20.262441 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5fb85-tls" condition "Issuing" to 2026-04-14 14:02:20.262425192 +0000 UTC m=+402.364837707 I0414 14:02:20.263370 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5fb85-tls" condition "Ready" to 2026-04-14 14:02:20.263360405 +0000 UTC m=+402.365772900 I0414 14:02:20.278673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5fb85-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5fb85-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:20.278848 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5fb85-tls" condition "Ready" to 2026-04-14 14:02:20.278839135 +0000 UTC m=+402.381251610 I0414 14:02:20.612416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5fb85-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5fb85-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:20.645555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5fb85-n9fr8" condition "Approved" to 2026-04-14 14:02:20.64554508 +0000 UTC m=+402.747957545 I0414 14:02:20.663572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5fb85-n9fr8" condition "Ready" to 2026-04-14 14:02:20.663562976 +0000 UTC m=+402.765975431 I0414 14:02:20.693493 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5fb85-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:02:20.693473958 +0000 UTC m=+402.795886413 I0414 14:02:20.721569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5fb85-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5fb85-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:33.398388 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 14:02:33.398368921 +0000 UTC m=+415.500781416 I0414 14:02:33.398918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:02:33.398948 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 14:02:33.398940759 +0000 UTC m=+415.501353244 I0414 14:02:33.412445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:33.412599 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 14:02:33.412586495 +0000 UTC m=+415.514998990 I0414 14:02:33.555497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:33.586246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nnfm6" condition "Approved" to 2026-04-14 14:02:33.586238322 +0000 UTC m=+415.688650777 I0414 14:02:33.619711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nnfm6" condition "Ready" to 2026-04-14 14:02:33.619699863 +0000 UTC m=+415.722112328 I0414 14:02:33.645740 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:02:33.645729148 +0000 UTC m=+415.748141623 I0414 14:02:33.672291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:33.672523 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:02:33.672517033 +0000 UTC m=+415.774929488 I0414 14:02:33.684580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:02:33.684970 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:02:33.684963562 +0000 UTC m=+415.787376027 I0414 14:05:48.181675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:05:48.181701 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-14 14:05:48.181688079 +0000 UTC m=+610.284100544 I0414 14:05:48.181746 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 14:05:48.18173941 +0000 UTC m=+610.284151875 I0414 14:05:48.200999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:05:48.201095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:05:48.201125 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 14:05:48.201116454 +0000 UTC m=+610.303528939 I0414 14:05:48.408142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tdtpx" condition "Approved" to 2026-04-14 14:05:48.408130543 +0000 UTC m=+610.510543008 I0414 14:05:48.426923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tdtpx" condition "Ready" to 2026-04-14 14:05:48.4269123 +0000 UTC m=+610.529324775 I0414 14:05:48.449297 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:05:48.449289088 +0000 UTC m=+610.551701553 I0414 14:05:48.474311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:05:48.474520 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:05:48.474515689 +0000 UTC m=+610.576928144 I0414 14:05:48.493030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:06:29.458446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:06:29.458480 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 14:06:29.458473589 +0000 UTC m=+651.560886054 I0414 14:06:29.458830 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 14:06:29.458824683 +0000 UTC m=+651.561237148 I0414 14:06:29.474121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:06:29.474175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:06:29.474190 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 14:06:29.474183397 +0000 UTC m=+651.576595862 I0414 14:06:29.811658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fq25b" condition "Approved" to 2026-04-14 14:06:29.811644018 +0000 UTC m=+651.914056503 I0414 14:06:29.835643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fq25b" condition "Ready" to 2026-04-14 14:06:29.83563222 +0000 UTC m=+651.938044685 I0414 14:06:29.867702 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:06:29.867689403 +0000 UTC m=+651.970101858 I0414 14:06:29.894260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"