I0428 03:20:05.269751 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 03:20:05.269919 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 03:20:05.270032 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 03:20:05.274770 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 03:20:05.275522 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 03:20:05.275561 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 03:20:05.275606 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 03:20:05.279120 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 03:20:05.292268 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 03:20:05.296313 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 03:20:05.296370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 03:20:05.296384 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 03:20:05.302181 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 03:20:05.305198 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 03:20:05.305302 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 03:20:05.307853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 03:20:05.310340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 03:20:05.312774 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 03:20:05.312855 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 03:20:05.313009 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 03:20:05.315573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 03:20:05.318114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 03:20:05.323680 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 03:20:05.326193 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 03:20:05.328955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 03:20:05.331146 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 03:20:05.333562 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 03:20:05.336583 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 03:20:05.336621 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 03:20:05.339518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 03:20:05.342898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 03:20:05.349166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 03:20:05.353672 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 03:20:05.356635 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:20:05.356838 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:20:05.357207 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:20:05.357538 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:20:05.379468 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:20:05.412366 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:20:05.426617 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:20:05.440179 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:20:05.451819 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:20:05.459449 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:20:17.307081 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 03:20:17.307068735 +0000 UTC m=+12.070664234 I0428 03:20:18.129959 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 03:20:18.129945914 +0000 UTC m=+12.893541453 I0428 03:20:18.130793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:20:18.130814 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 03:20:18.130809913 +0000 UTC m=+12.894405412 E0428 03:20:18.148752 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:20:18.148930 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 03:20:18.148900312 +0000 UTC m=+12.912495841 E0428 03:20:18.148965 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:20:18.151343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:20:18.151406 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 03:20:18.151398546 +0000 UTC m=+12.914994045 E0428 03:20:18.158861 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 03:20:18.158954 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:20:18.158996 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:20:18.159031 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 03:20:18.169398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:20:18.191830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gsgkd" condition "Approved" to 2026-04-28 03:20:18.191819937 +0000 UTC m=+12.955415436 I0428 03:20:18.203555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gsgkd" condition "Ready" to 2026-04-28 03:20:18.203543776 +0000 UTC m=+12.967139275 I0428 03:20:18.222419 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:20:18.222408862 +0000 UTC m=+12.986004351 I0428 03:20:18.237578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:20:23.159527 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:20:23.159512424 +0000 UTC m=+17.923107913 I0428 03:20:51.311684 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 03:20:51.311649027 +0000 UTC m=+46.075244516 I0428 03:20:51.311975 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:20:51.311995 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 03:20:51.311992414 +0000 UTC m=+46.075587903 I0428 03:20:51.328756 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 03:20:51.328741945 +0000 UTC m=+46.092337434 I0428 03:20:51.367447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:20:51.367515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:20:51.367536 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 03:20:51.36752982 +0000 UTC m=+46.131125329 I0428 03:20:51.606553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:20:51.621922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v7f79" condition "Approved" to 2026-04-28 03:20:51.621910205 +0000 UTC m=+46.385505694 I0428 03:20:51.670528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v7f79" condition "Ready" to 2026-04-28 03:20:51.670516478 +0000 UTC m=+46.434111967 I0428 03:20:51.712858 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:20:51.712838917 +0000 UTC m=+46.476434406 I0428 03:20:51.744436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:28.857306 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-174.nip.io-tls" condition "Ready" to 2026-04-28 03:25:28.857289952 +0000 UTC m=+323.620885471 I0428 03:25:28.857361 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-174.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:25:28.857412 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-174.nip.io-tls" condition "Issuing" to 2026-04-28 03:25:28.857405934 +0000 UTC m=+323.621001433 I0428 03:25:28.954548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-174.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-174.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:28.954764 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-174.nip.io-tls" condition "Ready" to 2026-04-28 03:25:28.954755246 +0000 UTC m=+323.718350765 I0428 03:25:29.361354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-174.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-174.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:29.710035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-174.nip.io-tls-qkj4m" condition "Approved" to 2026-04-28 03:25:29.710024513 +0000 UTC m=+324.473620022 I0428 03:25:29.738627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-174.nip.io-tls-qkj4m" condition "Ready" to 2026-04-28 03:25:29.738597107 +0000 UTC m=+324.502192636 I0428 03:25:29.766192 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-174.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:29.766179207 +0000 UTC m=+324.529774706 I0428 03:25:29.783330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-174.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-174.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:29.783613 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-174.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:29.783608335 +0000 UTC m=+324.547203824 I0428 03:25:29.791366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-174.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-174.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:29.802560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-174.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-174.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:26:33.076943 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 03:26:33.076885921 +0000 UTC m=+387.840481760 I0428 03:26:33.077416 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:26:33.077437 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 03:26:33.077432611 +0000 UTC m=+387.841028110 I0428 03:26:33.093484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:26:33.093537 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 03:26:33.093530439 +0000 UTC m=+387.857125938 E0428 03:26:33.097429 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:26:33.097463 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 03:26:33.097457616 +0000 UTC m=+387.861053105 E0428 03:26:33.097502 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:26:33.113582 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 03:26:33.113807 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:26:33.114695 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:26:33.114871 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 03:26:33.116614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:26:33.116673 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 03:26:33.116666684 +0000 UTC m=+387.880262193 I0428 03:26:33.121754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wrbhz" condition "Approved" to 2026-04-28 03:26:33.121739975 +0000 UTC m=+387.885335494 I0428 03:26:33.129616 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 03:26:33.1295961 +0000 UTC m=+387.893191609 I0428 03:26:33.136386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wrbhz" condition "Ready" to 2026-04-28 03:26:33.136376084 +0000 UTC m=+387.899971583 I0428 03:26:33.142519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:26:33.159900 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:26:33.159884796 +0000 UTC m=+387.923480295 I0428 03:26:33.175495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:26:33.175830 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:26:33.175820321 +0000 UTC m=+387.939415830 I0428 03:26:33.192950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:26:33.193827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:26:38.115019 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:26:38.115008058 +0000 UTC m=+392.878603547 I0428 03:27:20.271108 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 03:27:20.271097314 +0000 UTC m=+435.034692803 I0428 03:27:20.271277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:27:20.271370 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 03:27:20.271364129 +0000 UTC m=+435.034959628 I0428 03:27:20.281353 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 03:27:20.28134159 +0000 UTC m=+435.044937079 I0428 03:27:20.281616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:27:20.281630 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 03:27:20.281627495 +0000 UTC m=+435.045222984 I0428 03:27:20.299454 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 03:27:20.29944165 +0000 UTC m=+435.063037149 I0428 03:27:20.299480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:27:20.299717 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 03:27:20.299710095 +0000 UTC m=+435.063305584 I0428 03:27:20.308939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:20.309042 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 03:27:20.309034404 +0000 UTC m=+435.072629913 I0428 03:27:20.312234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:20.312402 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 03:27:20.312325405 +0000 UTC m=+435.075920914 I0428 03:27:20.322025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:20.322185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:27:20.322236 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 03:27:20.322228885 +0000 UTC m=+435.085824384 I0428 03:27:20.553805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:20.572994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:20.595931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9xjcz" condition "Approved" to 2026-04-28 03:27:20.595920769 +0000 UTC m=+435.359516268 I0428 03:27:20.596038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-w2sh4" condition "Approved" to 2026-04-28 03:27:20.596032211 +0000 UTC m=+435.359627700 I0428 03:27:20.626767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9xjcz" condition "Ready" to 2026-04-28 03:27:20.626758181 +0000 UTC m=+435.390353670 I0428 03:27:20.627333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-w2sh4" condition "Ready" to 2026-04-28 03:27:20.627327051 +0000 UTC m=+435.390922540 I0428 03:27:20.680899 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:27:20.680888768 +0000 UTC m=+435.444484257 I0428 03:27:20.689424 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:27:20.689415512 +0000 UTC m=+435.453010991 I0428 03:27:20.718374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:20.718639 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:27:20.718632794 +0000 UTC m=+435.482228283 I0428 03:27:20.731316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:20.739567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:20.745363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:21.050231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lxdv5" condition "Approved" to 2026-04-28 03:27:21.050221352 +0000 UTC m=+435.813816841 I0428 03:27:21.303576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lxdv5" condition "Ready" to 2026-04-28 03:27:21.303564509 +0000 UTC m=+436.067160018 I0428 03:27:21.839597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:21.889518 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:27:21.889505586 +0000 UTC m=+436.653101075 I0428 03:27:21.989909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:21.990399 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:27:21.99038991 +0000 UTC m=+436.753985439 I0428 03:27:22.241511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:22.294041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:28.423223 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-75hnq-tls" condition "Ready" to 2026-04-28 03:27:28.423210805 +0000 UTC m=+443.186806304 I0428 03:27:28.423258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-75hnq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:27:28.423290 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-75hnq-tls" condition "Issuing" to 2026-04-28 03:27:28.423281847 +0000 UTC m=+443.186877346 I0428 03:27:28.438385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-75hnq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-75hnq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:28.438457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-75hnq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:27:28.438502 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-75hnq-tls" condition "Issuing" to 2026-04-28 03:27:28.43849729 +0000 UTC m=+443.202092779 I0428 03:27:28.730279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-75hnq-6rz87" condition "Approved" to 2026-04-28 03:27:28.730266625 +0000 UTC m=+443.493862114 I0428 03:27:28.751295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-75hnq-6rz87" condition "Ready" to 2026-04-28 03:27:28.751283493 +0000 UTC m=+443.514878982 I0428 03:27:28.788013 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-75hnq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:27:28.788001075 +0000 UTC m=+443.551596554 I0428 03:27:28.811130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-75hnq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-75hnq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:28.811363 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-75hnq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:27:28.811357625 +0000 UTC m=+443.574953104 I0428 03:27:28.834237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-75hnq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-75hnq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:42.039111 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 03:27:42.03909075 +0000 UTC m=+456.802686249 I0428 03:27:42.039483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:27:42.039508 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 03:27:42.039501647 +0000 UTC m=+456.803097146 I0428 03:27:42.065274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:42.065386 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 03:27:42.065375455 +0000 UTC m=+456.828970954 I0428 03:27:42.285762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:42.326201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-65mjx" condition "Approved" to 2026-04-28 03:27:42.326190387 +0000 UTC m=+457.089785876 I0428 03:27:42.350763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-65mjx" condition "Ready" to 2026-04-28 03:27:42.350749481 +0000 UTC m=+457.114344990 I0428 03:27:42.382808 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:27:42.382788097 +0000 UTC m=+457.146383586 I0428 03:27:42.401218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:27:42.401545 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:27:42.401535749 +0000 UTC m=+457.165131248 I0428 03:27:42.434058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:54.502347 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 03:30:54.502296062 +0000 UTC m=+649.265891581 I0428 03:30:54.502519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:30:54.502547 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 03:30:54.502539497 +0000 UTC m=+649.266134996 I0428 03:30:54.518216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:54.518258 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 03:30:54.51825306 +0000 UTC m=+649.281848549 I0428 03:30:54.714594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:54.744182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wcvnx" condition "Approved" to 2026-04-28 03:30:54.74416462 +0000 UTC m=+649.507760129 I0428 03:30:54.766302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wcvnx" condition "Ready" to 2026-04-28 03:30:54.766293222 +0000 UTC m=+649.529888711 I0428 03:30:54.797808 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:54.797794651 +0000 UTC m=+649.561390140 I0428 03:30:54.818637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:54.819051 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:54.819044219 +0000 UTC m=+649.582639728 I0428 03:30:54.851710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:31:34.805949 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 03:31:34.805913443 +0000 UTC m=+689.569508942 I0428 03:31:34.806086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:31:34.806112 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 03:31:34.806109025 +0000 UTC m=+689.569704504 I0428 03:31:34.823214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:31:34.823268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:31:34.823286 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 03:31:34.823279139 +0000 UTC m=+689.586874638 I0428 03:31:35.040685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:31:35.049772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ds2sc" condition "Approved" to 2026-04-28 03:31:35.049764518 +0000 UTC m=+689.813360007 I0428 03:31:35.071554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ds2sc" condition "Ready" to 2026-04-28 03:31:35.071542012 +0000 UTC m=+689.835137491 I0428 03:31:35.097493 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:31:35.097478469 +0000 UTC m=+689.861073958 I0428 03:31:35.121966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"