I0407 00:09:17.538591 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 00:09:17.538803 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 00:09:17.538999 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 00:09:17.543553 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 00:09:17.544191 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 00:09:17.544207 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 00:09:17.544242 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 00:09:17.547348 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 00:09:17.573944 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 00:09:17.582682 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 00:09:17.584869 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 00:09:17.587496 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 00:09:17.589570 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 00:09:17.589613 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 00:09:17.589673 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 00:09:17.592141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 00:09:17.594268 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 00:09:17.594454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 00:09:17.598925 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 00:09:17.605998 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 00:09:17.608164 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 00:09:17.608217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 00:09:17.610377 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 00:09:17.610450 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 00:09:17.613632 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 00:09:17.616952 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 00:09:17.619579 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 00:09:17.622306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 00:09:17.624777 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 00:09:17.632389 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 00:09:17.636189 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 00:09:17.636284 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 00:09:17.639168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 00:09:17.641380 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:09:17.642111 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:09:17.642452 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:09:17.642920 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:09:17.675810 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:09:17.709231 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:09:17.715826 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:09:17.738955 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:09:17.750802 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:09:17.763097 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:09:29.030594 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 00:09:29.030577785 +0000 UTC m=+11.521443552 I0407 00:09:29.774402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:09:29.774499 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 00:09:29.774478244 +0000 UTC m=+12.265344031 I0407 00:09:29.774763 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 00:09:29.774746541 +0000 UTC m=+12.265612328 E0407 00:09:29.832135 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:09:29.832200 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 00:09:29.832192247 +0000 UTC m=+12.323058014 E0407 00:09:29.832224 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:09:29.835543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:09:29.835629 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 00:09:29.835619207 +0000 UTC m=+12.326484974 E0407 00:09:29.928589 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 00:09:29.951295 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:09:29.951454 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:09:29.951566 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 00:09:29.957177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:09:30.035695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mct2n" condition "Approved" to 2026-04-07 00:09:30.035679169 +0000 UTC m=+12.526544956 I0407 00:09:30.061727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mct2n" condition "Ready" to 2026-04-07 00:09:30.061718207 +0000 UTC m=+12.552583964 I0407 00:09:30.091387 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:09:30.091369759 +0000 UTC m=+12.582235526 I0407 00:09:30.132181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:09:34.930025 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:09:34.930015392 +0000 UTC m=+17.420881159 I0407 00:09:57.102587 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 00:09:57.102552326 +0000 UTC m=+39.593418083 I0407 00:09:57.102864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:09:57.103581 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 00:09:57.103570247 +0000 UTC m=+39.594436044 I0407 00:09:57.115968 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 00:09:57.115954104 +0000 UTC m=+39.606819871 I0407 00:09:57.123519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:09:57.123684 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:09:57.123747 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 00:09:57.123740978 +0000 UTC m=+39.614606735 I0407 00:09:57.428639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:09:57.499107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jxsd5" condition "Approved" to 2026-04-07 00:09:57.499092509 +0000 UTC m=+39.989958286 I0407 00:09:57.546533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jxsd5" condition "Ready" to 2026-04-07 00:09:57.546519619 +0000 UTC m=+40.037385416 I0407 00:09:57.618145 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:09:57.618132796 +0000 UTC m=+40.108998563 I0407 00:09:57.645504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:09:57.645869 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:09:57.645862332 +0000 UTC m=+40.136728089 I0407 00:09:57.667575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:09:57.667879 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:09:57.667872359 +0000 UTC m=+40.158738126 I0407 00:14:22.370991 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:22.371039 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-57.nip.io-tls" condition "Issuing" to 2026-04-07 00:14:22.371030187 +0000 UTC m=+304.861895984 I0407 00:14:22.370991 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-57.nip.io-tls" condition "Ready" to 2026-04-07 00:14:22.370869491 +0000 UTC m=+304.861735318 I0407 00:14:22.386675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:22.386741 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-57.nip.io-tls" condition "Ready" to 2026-04-07 00:14:22.386733833 +0000 UTC m=+304.877599600 I0407 00:14:22.773522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:22.801356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-57.nip.io-tls-lgkf6" condition "Approved" to 2026-04-07 00:14:22.801340778 +0000 UTC m=+305.292206575 I0407 00:14:22.833782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-57.nip.io-tls-lgkf6" condition "Ready" to 2026-04-07 00:14:22.833770328 +0000 UTC m=+305.324636085 I0407 00:14:22.855442 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:22.855430667 +0000 UTC m=+305.346296434 I0407 00:14:22.882645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:22.883165 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:22.883156474 +0000 UTC m=+305.374022261 I0407 00:14:22.894551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:22.900420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:22.900720 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:22.900712942 +0000 UTC m=+305.391578709 I0407 00:15:26.189327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:15:26.189450 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 00:15:26.189433988 +0000 UTC m=+368.680299775 I0407 00:15:26.189476 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 00:15:26.189466449 +0000 UTC m=+368.680332216 I0407 00:15:26.207753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:15:26.207909 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 00:15:26.207897969 +0000 UTC m=+368.698763726 E0407 00:15:26.208423 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:15:26.213614 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 00:15:26.213586384 +0000 UTC m=+368.704452181 E0407 00:15:26.213746 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:15:26.228496 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 00:15:26.228592 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:15:26.228627 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:15:26.228832 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 00:15:26.230245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:15:26.249288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vvksq" condition "Approved" to 2026-04-07 00:15:26.249277029 +0000 UTC m=+368.740142796 I0407 00:15:26.262539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vvksq" condition "Ready" to 2026-04-07 00:15:26.262532005 +0000 UTC m=+368.753397772 I0407 00:15:26.286558 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:15:26.286545045 +0000 UTC m=+368.777410832 I0407 00:15:26.301993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:15:31.229032 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:15:31.229020176 +0000 UTC m=+373.719885943 I0407 00:16:12.109307 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 00:16:12.109255255 +0000 UTC m=+414.600121022 I0407 00:16:12.109518 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:16:12.109633 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 00:16:12.109623439 +0000 UTC m=+414.600489236 I0407 00:16:12.117709 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 00:16:12.117695848 +0000 UTC m=+414.608561605 I0407 00:16:12.117963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:16:12.118050 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 00:16:12.117989322 +0000 UTC m=+414.608855079 I0407 00:16:12.124094 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 00:16:12.124082097 +0000 UTC m=+414.614947854 I0407 00:16:12.125830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:16:12.126039 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 00:16:12.126031061 +0000 UTC m=+414.616896828 I0407 00:16:12.167638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:12.167687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:16:12.167705 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 00:16:12.167699892 +0000 UTC m=+414.658565639 I0407 00:16:12.171475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:12.171524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:16:12.171548 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 00:16:12.171544338 +0000 UTC m=+414.662410095 I0407 00:16:12.174178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:12.176562 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:16:12.176623 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 00:16:12.17661787 +0000 UTC m=+414.667483617 I0407 00:16:12.317223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bt2gm" condition "Approved" to 2026-04-07 00:16:12.317213973 +0000 UTC m=+414.808079730 I0407 00:16:12.318304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:12.339780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bt2gm" condition "Ready" to 2026-04-07 00:16:12.33977104 +0000 UTC m=+414.830636787 I0407 00:16:12.372033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tjnxt" condition "Approved" to 2026-04-07 00:16:12.372021485 +0000 UTC m=+414.862887232 I0407 00:16:12.382343 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:16:12.382327572 +0000 UTC m=+414.873193339 I0407 00:16:12.398743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tjnxt" condition "Ready" to 2026-04-07 00:16:12.398729162 +0000 UTC m=+414.889594929 I0407 00:16:12.401187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:12.446803 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:16:12.446792101 +0000 UTC m=+414.937657848 I0407 00:16:12.502171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:12.502660 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:16:12.502652376 +0000 UTC m=+414.993518143 I0407 00:16:12.708183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:12.970639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k54vh" condition "Approved" to 2026-04-07 00:16:12.970626921 +0000 UTC m=+415.461492688 I0407 00:16:13.060566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k54vh" condition "Ready" to 2026-04-07 00:16:13.060552918 +0000 UTC m=+415.551418685 I0407 00:16:13.507679 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:16:13.50766637 +0000 UTC m=+415.998532117 I0407 00:16:13.612128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:13.612586 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:16:13.612580816 +0000 UTC m=+416.103446563 I0407 00:16:13.850206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:13.903247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:20.048725 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-chh49-tls" condition "Ready" to 2026-04-07 00:16:20.048707861 +0000 UTC m=+422.539573638 I0407 00:16:20.048938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-chh49-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:16:20.048987 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-chh49-tls" condition "Issuing" to 2026-04-07 00:16:20.048958804 +0000 UTC m=+422.539824571 I0407 00:16:20.063477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-chh49-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-chh49-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:20.063609 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-chh49-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:16:20.063635 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-chh49-tls" condition "Issuing" to 2026-04-07 00:16:20.063628195 +0000 UTC m=+422.554493962 I0407 00:16:20.587439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-chh49-tgbf9" condition "Approved" to 2026-04-07 00:16:20.587428481 +0000 UTC m=+423.078294238 I0407 00:16:20.628905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-chh49-tgbf9" condition "Ready" to 2026-04-07 00:16:20.62889552 +0000 UTC m=+423.119761287 I0407 00:16:20.660307 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-chh49-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:16:20.660294669 +0000 UTC m=+423.151160416 I0407 00:16:20.688197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-chh49-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-chh49-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:20.688504 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-chh49-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:16:20.688495156 +0000 UTC m=+423.179360923 I0407 00:16:20.694667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-chh49-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-chh49-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:20.710215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-chh49-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-chh49-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:20.710439 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-chh49-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:16:20.710433611 +0000 UTC m=+423.201299358 I0407 00:16:33.562208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:16:33.562239 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 00:16:33.562231232 +0000 UTC m=+436.053096999 I0407 00:16:33.562597 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 00:16:33.562591878 +0000 UTC m=+436.053457645 I0407 00:16:33.582321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:33.582385 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 00:16:33.582380088 +0000 UTC m=+436.073245845 I0407 00:16:33.799679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:16:33.828691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cjdbs" condition "Approved" to 2026-04-07 00:16:33.828683134 +0000 UTC m=+436.319548881 I0407 00:16:33.850702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cjdbs" condition "Ready" to 2026-04-07 00:16:33.850691257 +0000 UTC m=+436.341557034 I0407 00:16:33.886620 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:16:33.886608276 +0000 UTC m=+436.377474033 I0407 00:16:33.919093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:19:53.513668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:19:53.513704 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 00:19:53.5136948 +0000 UTC m=+636.004560587 I0407 00:19:53.514172 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 00:19:53.514151282 +0000 UTC m=+636.005017079 I0407 00:19:53.535668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:19:53.535884 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 00:19:53.535870507 +0000 UTC m=+636.026736304 I0407 00:19:53.716876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:19:53.758595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fmj4v" condition "Approved" to 2026-04-07 00:19:53.758582834 +0000 UTC m=+636.249448591 I0407 00:19:53.789866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fmj4v" condition "Ready" to 2026-04-07 00:19:53.789855932 +0000 UTC m=+636.280721689 I0407 00:19:53.814612 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:19:53.814597317 +0000 UTC m=+636.305463084 I0407 00:19:53.845705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:19:53.902302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:20:34.642442 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 00:20:34.64241786 +0000 UTC m=+677.133283607 I0407 00:20:34.642806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:20:34.642837 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 00:20:34.642833032 +0000 UTC m=+677.133698789 I0407 00:20:34.657131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:20:34.657190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:20:34.657205 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 00:20:34.657199496 +0000 UTC m=+677.148065263 I0407 00:20:34.827554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:20:34.837058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mlklf" condition "Approved" to 2026-04-07 00:20:34.837045343 +0000 UTC m=+677.327911130 I0407 00:20:34.866191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mlklf" condition "Ready" to 2026-04-07 00:20:34.866178909 +0000 UTC m=+677.357044676 I0407 00:20:34.895790 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:20:34.895781959 +0000 UTC m=+677.386647716 I0407 00:20:34.916277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:20:34.959851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"