I0421 18:11:33.551971 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0421 18:11:33.552306 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0421 18:11:33.552429 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0421 18:11:33.558528 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0421 18:11:33.558922 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0421 18:11:33.559030 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0421 18:11:33.559115 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0421 18:11:33.560918 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0421 18:11:33.579769 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0421 18:11:33.584725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0421 18:11:33.594631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0421 18:11:33.598181 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0421 18:11:33.600999 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0421 18:11:33.604261 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0421 18:11:33.604287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0421 18:11:33.608992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0421 18:11:33.612928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0421 18:11:33.618397 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0421 18:11:33.618425 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0421 18:11:33.618535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0421 18:11:33.621057 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0421 18:11:33.623301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0421 18:11:33.625043 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0421 18:11:33.626928 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0421 18:11:33.627086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0421 18:11:33.628824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0421 18:11:33.630828 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0421 18:11:33.632585 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0421 18:11:33.637113 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0421 18:11:33.640676 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0421 18:11:33.640709 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0421 18:11:33.640757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0421 18:11:33.643835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0421 18:11:33.646781 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:11:33.647307 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:11:33.648102 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:11:33.648335 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:11:33.648344 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:11:33.648892 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:11:33.649185 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:11:33.649292 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:11:33.648110 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:11:33.728723 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 18:11:55.847673 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 18:11:55.847650205 +0000 UTC m=+22.325781068 I0421 18:11:56.585889 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 18:11:56.585873914 +0000 UTC m=+23.064004807 I0421 18:11:56.587052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:11:56.587106 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 18:11:56.587098048 +0000 UTC m=+23.065228941 E0421 18:11:56.600404 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 18:11:56.600469 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 18:11:56.600461763 +0000 UTC m=+23.078592626 E0421 18:11:56.600491 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 18:11:56.603630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:11:56.603719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:11:56.603744 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 18:11:56.603738533 +0000 UTC m=+23.081869396 E0421 18:11:56.610548 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0421 18:11:56.610837 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 18:11:56.611025 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 18:11:56.611133 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0421 18:11:56.659140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6g7pr" condition "Approved" to 2026-04-21 18:11:56.659127386 +0000 UTC m=+23.137258239 I0421 18:11:56.674264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6g7pr" condition "Ready" to 2026-04-21 18:11:56.67424674 +0000 UTC m=+23.152377603 I0421 18:11:56.697422 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:11:56.697408473 +0000 UTC m=+23.175539336 I0421 18:11:56.714459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:12:01.611353 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:12:01.611339413 +0000 UTC m=+28.089470306 I0421 18:12:30.741219 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 18:12:30.741180509 +0000 UTC m=+57.219311362 I0421 18:12:30.741538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:12:30.741554 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 18:12:30.741550626 +0000 UTC m=+57.219681479 I0421 18:12:30.760045 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 18:12:30.760028752 +0000 UTC m=+57.238159635 I0421 18:12:30.774937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:12:30.775365 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 18:12:30.775352712 +0000 UTC m=+57.253483605 I0421 18:12:30.897927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:12:30.944426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z5jb9" condition "Approved" to 2026-04-21 18:12:30.944414167 +0000 UTC m=+57.422545020 I0421 18:12:30.981780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z5jb9" condition "Ready" to 2026-04-21 18:12:30.981768414 +0000 UTC m=+57.459899277 I0421 18:12:31.019243 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:12:31.019230001 +0000 UTC m=+57.497360854 I0421 18:12:31.081505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:17:53.518867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-139.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:17:53.518931 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Issuing" to 2026-04-21 18:17:53.518902986 +0000 UTC m=+379.997033859 I0421 18:17:53.519453 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Ready" to 2026-04-21 18:17:53.519434942 +0000 UTC m=+379.997565805 I0421 18:17:53.537467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:17:53.537527 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Ready" to 2026-04-21 18:17:53.537518751 +0000 UTC m=+380.015649604 I0421 18:17:53.808285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:17:53.835190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-139.nip.io-tls-9wvr5" condition "Approved" to 2026-04-21 18:17:53.835174963 +0000 UTC m=+380.313305826 I0421 18:17:53.895907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-139.nip.io-tls-9wvr5" condition "Ready" to 2026-04-21 18:17:53.895894045 +0000 UTC m=+380.374024908 I0421 18:17:53.935858 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:17:53.935843426 +0000 UTC m=+380.413974319 I0421 18:17:53.964675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:17:53.964976 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:17:53.964968443 +0000 UTC m=+380.443099296 I0421 18:17:53.981598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:17:53.991477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:18:57.181620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:18:57.181667 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 18:18:57.181658045 +0000 UTC m=+443.659788938 I0421 18:18:57.181504 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 18:18:57.181466313 +0000 UTC m=+443.659597206 E0421 18:18:57.195243 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 18:18:57.195277 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-21 18:18:57.195269288 +0000 UTC m=+443.673400151 E0421 18:18:57.195501 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 18:18:57.197523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:18:57.197584 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 18:18:57.197578114 +0000 UTC m=+443.675708987 E0421 18:18:57.207263 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0421 18:18:57.207352 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 18:18:57.207481 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 18:18:57.207524 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0421 18:18:57.216915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:18:57.235459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dcdzn" condition "Approved" to 2026-04-21 18:18:57.235440289 +0000 UTC m=+443.713571152 I0421 18:18:57.259143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dcdzn" condition "Ready" to 2026-04-21 18:18:57.259124285 +0000 UTC m=+443.737255168 I0421 18:18:57.277586 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:18:57.277572832 +0000 UTC m=+443.755703695 I0421 18:18:57.293058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:18:57.293800 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:18:57.293791443 +0000 UTC m=+443.771922306 I0421 18:18:57.307519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:02.208444 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:02.208424238 +0000 UTC m=+448.686555121 I0421 18:19:42.087625 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:19:42.091259 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 18:19:42.091245204 +0000 UTC m=+488.569376057 I0421 18:19:42.095776 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 18:19:42.087662314 +0000 UTC m=+488.565793167 I0421 18:19:42.104485 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 18:19:42.104471311 +0000 UTC m=+488.582602164 I0421 18:19:42.104619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:19:42.106037 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 18:19:42.104643092 +0000 UTC m=+488.582773945 I0421 18:19:42.111366 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 18:19:42.111351457 +0000 UTC m=+488.589482310 I0421 18:19:42.111676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:19:42.111727 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 18:19:42.111722601 +0000 UTC m=+488.589853484 I0421 18:19:42.132907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:42.133026 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 18:19:42.133016857 +0000 UTC m=+488.611147740 I0421 18:19:42.139242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:42.140037 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:19:42.140099 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 18:19:42.140093645 +0000 UTC m=+488.618224498 I0421 18:19:42.167457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:42.167558 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 18:19:42.167551928 +0000 UTC m=+488.645682781 I0421 18:19:42.329389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:42.367090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-64msg" condition "Approved" to 2026-04-21 18:19:42.367079537 +0000 UTC m=+488.845210400 I0421 18:19:42.386006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pzz95" condition "Approved" to 2026-04-21 18:19:42.385995046 +0000 UTC m=+488.864125909 I0421 18:19:42.395828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-64msg" condition "Ready" to 2026-04-21 18:19:42.395815754 +0000 UTC m=+488.873946617 I0421 18:19:42.414231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pzz95" condition "Ready" to 2026-04-21 18:19:42.414218729 +0000 UTC m=+488.892349592 I0421 18:19:42.441237 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:42.441223778 +0000 UTC m=+488.919354631 I0421 18:19:42.465102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:42.465150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:42.465464 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:42.465448315 +0000 UTC m=+488.943579168 I0421 18:19:42.466266 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:42.466258395 +0000 UTC m=+488.944389248 I0421 18:19:42.608467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:42.608743 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:42.608736191 +0000 UTC m=+489.086867044 I0421 18:19:42.631004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:42.729613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zzx6l" condition "Approved" to 2026-04-21 18:19:42.729601949 +0000 UTC m=+489.207732812 I0421 18:19:42.925510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:43.044489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zzx6l" condition "Ready" to 2026-04-21 18:19:43.044478593 +0000 UTC m=+489.522609456 I0421 18:19:43.671357 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:43.671338408 +0000 UTC m=+490.149469301 I0421 18:19:43.705041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:43.705414 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:43.705408176 +0000 UTC m=+490.183539019 I0421 18:19:43.827889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:43.828327 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:43.828317446 +0000 UTC m=+490.306448309 I0421 18:19:43.876016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:51.554779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:19:51.554841 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls" condition "Issuing" to 2026-04-21 18:19:51.554829271 +0000 UTC m=+498.032960164 I0421 18:19:51.554778 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls" condition "Ready" to 2026-04-21 18:19:51.55472443 +0000 UTC m=+498.032855313 I0421 18:19:51.603622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:51.603898 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls" condition "Ready" to 2026-04-21 18:19:51.603891343 +0000 UTC m=+498.082022196 I0421 18:19:51.721303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:51.749407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hqwnf-tjxwh" condition "Approved" to 2026-04-21 18:19:51.749398859 +0000 UTC m=+498.227529702 I0421 18:19:51.771203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hqwnf-tjxwh" condition "Ready" to 2026-04-21 18:19:51.77117867 +0000 UTC m=+498.249309533 I0421 18:19:51.804246 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:51.804233195 +0000 UTC m=+498.282364058 I0421 18:19:51.832091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:51.898754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hqwnf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:08.332307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:20:08.332347 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 18:20:08.332328471 +0000 UTC m=+514.810459324 I0421 18:20:08.332638 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 18:20:08.332633244 +0000 UTC m=+514.810764097 I0421 18:20:08.355146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:08.355304 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 18:20:08.355252652 +0000 UTC m=+514.833383535 I0421 18:20:08.527483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:08.621110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-26v4r" condition "Approved" to 2026-04-21 18:20:08.621094136 +0000 UTC m=+515.099225009 I0421 18:20:08.641066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-26v4r" condition "Ready" to 2026-04-21 18:20:08.641051906 +0000 UTC m=+515.119182779 I0421 18:20:08.670549 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:08.670529 +0000 UTC m=+515.148659883 I0421 18:20:08.686343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:08.686662 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:08.686655528 +0000 UTC m=+515.164786381 I0421 18:20:08.695692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:08.714308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:23:24.081146 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 18:23:24.08109732 +0000 UTC m=+710.559228183 I0421 18:23:24.081544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:23:24.081560 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 18:23:24.081556656 +0000 UTC m=+710.559687509 I0421 18:23:24.099247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:23:24.099387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:23:24.099432 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 18:23:24.099425208 +0000 UTC m=+710.577556081 I0421 18:23:24.450623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:23:24.455889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kdzfw" condition "Approved" to 2026-04-21 18:23:24.455879975 +0000 UTC m=+710.934010848 I0421 18:23:24.473124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kdzfw" condition "Ready" to 2026-04-21 18:23:24.47311411 +0000 UTC m=+710.951244963 I0421 18:23:24.503548 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:23:24.503535048 +0000 UTC m=+710.981665911 I0421 18:23:24.533611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:23:24.533834 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:23:24.533829245 +0000 UTC m=+711.011960098 I0421 18:23:24.551267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:24:06.344508 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 18:24:06.344494523 +0000 UTC m=+752.822625386 I0421 18:24:06.345268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:24:06.345309 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-21 18:24:06.345299711 +0000 UTC m=+752.823430574 I0421 18:24:06.364586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:24:06.364710 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 18:24:06.36470108 +0000 UTC m=+752.842831943 I0421 18:24:06.979889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:24:07.009882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bnctp" condition "Approved" to 2026-04-21 18:24:07.009868634 +0000 UTC m=+753.487999487 I0421 18:24:07.029095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bnctp" condition "Ready" to 2026-04-21 18:24:07.02908497 +0000 UTC m=+753.507215833 I0421 18:24:07.058357 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:24:07.058347035 +0000 UTC m=+753.536477898 I0421 18:24:07.087239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"