I0407 05:46:57.667294 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 05:46:57.667424 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 05:46:57.667535 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 05:46:57.670662 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 05:46:57.671039 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 05:46:57.671165 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 05:46:57.671234 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 05:46:57.673332 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 05:46:57.687910 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 05:46:57.694953 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 05:46:57.698211 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 05:46:57.698235 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 05:46:57.698323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 05:46:57.700625 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 05:46:57.703007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 05:46:57.705170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 05:46:57.707463 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 05:46:57.709874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 05:46:57.714892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 05:46:57.719108 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 05:46:57.721746 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 05:46:57.723999 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 05:46:57.726354 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 05:46:57.728554 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 05:46:57.728640 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 05:46:57.730294 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 05:46:57.730454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 05:46:57.732239 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 05:46:57.733787 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 05:46:57.733804 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 05:46:57.734314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 05:46:57.738940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 05:46:57.742128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 05:46:57.743810 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:46:57.744469 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:46:57.744961 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:46:57.759417 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:46:57.780751 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:46:57.794223 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:46:57.809835 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:46:57.826428 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:46:57.836867 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:46:57.838770 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:47:15.050168 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 05:47:15.050150509 +0000 UTC m=+17.411883943 I0407 05:47:15.792091 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 05:47:15.792079589 +0000 UTC m=+18.153813043 I0407 05:47:15.792506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:47:15.792699 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 05:47:15.792690216 +0000 UTC m=+18.154423670 E0407 05:47:15.807097 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 05:47:15.807399 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 05:47:15.807385986 +0000 UTC m=+18.169119440 E0407 05:47:15.807566 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 05:47:15.810381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:15.810676 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 05:47:15.810666553 +0000 UTC m=+18.172400047 E0407 05:47:15.817664 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 05:47:15.817883 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:47:15.817969 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:47:15.818011 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 05:47:15.829178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:15.852829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8xhh4" condition "Approved" to 2026-04-07 05:47:15.852820215 +0000 UTC m=+18.214553659 I0407 05:47:15.865256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8xhh4" condition "Ready" to 2026-04-07 05:47:15.865246089 +0000 UTC m=+18.226979553 I0407 05:47:15.890801 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:47:15.890784623 +0000 UTC m=+18.252518127 I0407 05:47:15.907896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:15.947518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:20.818722 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:47:20.818711604 +0000 UTC m=+23.180445058 I0407 05:47:44.104783 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:47:44.104827 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 05:47:44.104818084 +0000 UTC m=+46.466551538 I0407 05:47:44.104900 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 05:47:44.104883765 +0000 UTC m=+46.466617219 I0407 05:47:44.127857 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 05:47:44.127840787 +0000 UTC m=+46.489574231 I0407 05:47:44.137811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:44.137938 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 05:47:44.137931837 +0000 UTC m=+46.499665271 I0407 05:47:44.386913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:44.422698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pdgds" condition "Approved" to 2026-04-07 05:47:44.422684398 +0000 UTC m=+46.784417882 I0407 05:47:44.456129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pdgds" condition "Ready" to 2026-04-07 05:47:44.456117692 +0000 UTC m=+46.817851146 I0407 05:47:44.490511 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:47:44.490501939 +0000 UTC m=+46.852235383 I0407 05:47:44.523133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:44.523343 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:47:44.52333801 +0000 UTC m=+46.885071464 I0407 05:47:44.527394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:44.539357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:47:44.539685 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:47:44.539676859 +0000 UTC m=+46.901410313 I0407 05:47:44.542355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:51:58.654191 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready" to 2026-04-07 05:51:58.654160689 +0000 UTC m=+301.015894143 I0407 05:51:58.654686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:51:58.654706 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-04-07 05:51:58.654702175 +0000 UTC m=+301.016435629 I0407 05:51:58.670385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:51:58.670475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:51:58.670552 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-04-07 05:51:58.670540821 +0000 UTC m=+301.032274295 I0407 05:51:58.877971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-kljtj" condition "Approved" to 2026-04-07 05:51:58.877959343 +0000 UTC m=+301.239692787 I0407 05:51:58.903505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-kljtj" condition "Ready" to 2026-04-07 05:51:58.9034946 +0000 UTC m=+301.265228044 I0407 05:51:58.930882 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:51:58.930874614 +0000 UTC m=+301.292608068 I0407 05:51:58.951302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:51:59.022363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:02.975663 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 05:53:02.975636945 +0000 UTC m=+365.337370399 I0407 05:53:02.975962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:53:02.976002 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 05:53:02.975993243 +0000 UTC m=+365.337726697 I0407 05:53:02.992297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:02.992358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:53:02.992385 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 05:53:02.992378555 +0000 UTC m=+365.354112009 E0407 05:53:02.995891 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 05:53:02.996078 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 05:53:02.995986852 +0000 UTC m=+365.357720296 E0407 05:53:02.996171 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:53:03.006426 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 05:53:03.008204 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:53:03.008281 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:53:03.008366 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 05:53:03.026852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:03.029245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9s8vv" condition "Approved" to 2026-04-07 05:53:03.029235044 +0000 UTC m=+365.390968498 I0407 05:53:03.041444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9s8vv" condition "Ready" to 2026-04-07 05:53:03.04143277 +0000 UTC m=+365.403166224 I0407 05:53:03.065282 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:53:03.06527041 +0000 UTC m=+365.427003864 I0407 05:53:03.079581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:03.117691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:08.007924 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:53:08.007911003 +0000 UTC m=+370.369644487 I0407 05:53:47.990300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:53:47.990330 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 05:53:47.990324555 +0000 UTC m=+410.352057999 I0407 05:53:47.992031 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 05:53:47.99019999 +0000 UTC m=+410.351933424 I0407 05:53:48.019860 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 05:53:48.019844568 +0000 UTC m=+410.381578012 I0407 05:53:48.020240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:53:48.023705 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 05:53:48.020254522 +0000 UTC m=+410.381987966 I0407 05:53:48.047258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:53:48.047291 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 05:53:48.047284932 +0000 UTC m=+410.409018376 I0407 05:53:48.047541 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 05:53:48.047528731 +0000 UTC m=+410.409262185 I0407 05:53:48.058164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:48.058274 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:53:48.058312 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 05:53:48.058302696 +0000 UTC m=+410.420036150 I0407 05:53:48.061676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:48.061832 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 05:53:48.061802497 +0000 UTC m=+410.423535951 I0407 05:53:48.074728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:48.074825 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 05:53:48.074816049 +0000 UTC m=+410.436549503 I0407 05:53:48.336621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9mmjk" condition "Approved" to 2026-04-07 05:53:48.336607632 +0000 UTC m=+410.698341086 I0407 05:53:48.357319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9mmjk" condition "Ready" to 2026-04-07 05:53:48.357306472 +0000 UTC m=+410.719039916 I0407 05:53:48.397358 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:53:48.397331044 +0000 UTC m=+410.759064488 I0407 05:53:48.426725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:48.448225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:48.496953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vpwgj" condition "Approved" to 2026-04-07 05:53:48.496943007 +0000 UTC m=+410.858676451 E0407 05:53:48.501922 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-m7jnr\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0407 05:53:48.512241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:48.526820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vpwgj" condition "Ready" to 2026-04-07 05:53:48.526809075 +0000 UTC m=+410.888542529 I0407 05:53:48.549241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7lcbr" condition "Approved" to 2026-04-07 05:53:48.549221714 +0000 UTC m=+410.910955158 I0407 05:53:48.591148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7lcbr" condition "Ready" to 2026-04-07 05:53:48.591136791 +0000 UTC m=+410.952870235 I0407 05:53:48.929185 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:53:48.929174105 +0000 UTC m=+411.290907559 I0407 05:53:49.184651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:49.229463 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:53:49.22944315 +0000 UTC m=+411.591176604 I0407 05:53:49.378141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:49.378467 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:53:49.378459317 +0000 UTC m=+411.740192771 I0407 05:53:49.728225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:49.826947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:50.017335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:57.862835 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" condition "Ready" to 2026-04-07 05:53:57.862816212 +0000 UTC m=+420.224549686 I0407 05:53:57.862975 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:53:57.863020 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" condition "Issuing" to 2026-04-07 05:53:57.863008229 +0000 UTC m=+420.224741713 I0407 05:53:57.879268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:57.879458 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" condition "Ready" to 2026-04-07 05:53:57.879447704 +0000 UTC m=+420.241181158 I0407 05:53:57.970212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:57.999887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dgvmj-bbjhm" condition "Approved" to 2026-04-07 05:53:57.999874602 +0000 UTC m=+420.361608046 I0407 05:53:58.020805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dgvmj-bbjhm" condition "Ready" to 2026-04-07 05:53:58.020795249 +0000 UTC m=+420.382528693 I0407 05:53:58.054111 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:53:58.054094933 +0000 UTC m=+420.415828387 I0407 05:53:58.075099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:58.076085 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:53:58.076078548 +0000 UTC m=+420.437812002 I0407 05:53:58.093050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:58.095929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:53:58.096256 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dgvmj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:53:58.096248526 +0000 UTC m=+420.457981970 I0407 05:54:10.433798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:54:10.433826 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 05:54:10.433819566 +0000 UTC m=+432.795553010 I0407 05:54:10.434177 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 05:54:10.434173309 +0000 UTC m=+432.795906743 I0407 05:54:10.457310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:10.457466 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 05:54:10.457452411 +0000 UTC m=+432.819185865 I0407 05:54:10.554693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:10.639659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c9vrb" condition "Approved" to 2026-04-07 05:54:10.639647081 +0000 UTC m=+433.001380535 I0407 05:54:10.671096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c9vrb" condition "Ready" to 2026-04-07 05:54:10.671077367 +0000 UTC m=+433.032810841 I0407 05:54:10.703253 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:54:10.70323463 +0000 UTC m=+433.064968074 I0407 05:54:10.722797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:57:28.647892 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:57:28.647936 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 05:57:28.647925371 +0000 UTC m=+631.009658845 I0407 05:57:28.648718 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 05:57:28.648709187 +0000 UTC m=+631.010442661 I0407 05:57:28.667500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:57:28.667555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:57:28.667663 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 05:57:28.667566298 +0000 UTC m=+631.029299752 I0407 05:57:28.916171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lxjkh" condition "Approved" to 2026-04-07 05:57:28.916158078 +0000 UTC m=+631.277891532 I0407 05:57:28.941871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lxjkh" condition "Ready" to 2026-04-07 05:57:28.941855108 +0000 UTC m=+631.303588562 I0407 05:57:28.971834 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:57:28.971822415 +0000 UTC m=+631.333555869 I0407 05:57:28.993680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:57:28.994108 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:57:28.994043877 +0000 UTC m=+631.355777331 I0407 05:57:29.016932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:08.826816 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 05:58:08.826800733 +0000 UTC m=+671.188534187 I0407 05:58:08.826862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:58:08.826922 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 05:58:08.82691505 +0000 UTC m=+671.188648504 I0407 05:58:08.855244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:08.855348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:58:08.855378 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 05:58:08.855372667 +0000 UTC m=+671.217106101 I0407 05:58:09.337417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-pkwg5" condition "Approved" to 2026-04-07 05:58:09.337402528 +0000 UTC m=+671.699135972 I0407 05:58:09.356911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-pkwg5" condition "Ready" to 2026-04-07 05:58:09.356901195 +0000 UTC m=+671.718634649 I0407 05:58:09.381548 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:58:09.381534049 +0000 UTC m=+671.743267513 I0407 05:58:09.406949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:09.407637 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:58:09.407626062 +0000 UTC m=+671.769359546 I0407 05:58:09.427538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:09.430025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:09.430337 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:58:09.430331267 +0000 UTC m=+671.792064711