I0409 17:28:41.640173 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 17:28:41.640265 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 17:28:41.640326 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 17:28:41.643141 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 17:28:41.643629 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 17:28:41.643637 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 17:28:41.643684 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 17:28:41.645528 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 17:28:41.657854 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 17:28:41.658057 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 17:28:41.658075 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 17:28:41.662086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 17:28:41.668261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 17:28:41.671051 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 17:28:41.673264 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 17:28:41.673289 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 17:28:41.675804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 17:28:41.678294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 17:28:41.679999 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 17:28:41.684862 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 17:28:41.687732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 17:28:41.690661 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 17:28:41.693204 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 17:28:41.693224 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 17:28:41.695802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 17:28:41.699000 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 17:28:41.701638 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 17:28:41.703567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 17:28:41.708815 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 17:28:41.708850 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 17:28:41.708905 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 17:28:41.712898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 17:28:41.716991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 17:28:41.719251 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:28:41.719487 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:28:41.719930 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:28:41.720242 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:28:41.740361 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:28:41.796570 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:28:41.812159 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:28:41.813879 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:28:41.832229 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:28:41.847487 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:28:54.602747 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 17:28:54.602690241 +0000 UTC m=+12.998911875 I0409 17:28:55.354446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:28:55.354499 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 17:28:55.354487786 +0000 UTC m=+13.750709460 I0409 17:28:55.354400 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 17:28:55.354385614 +0000 UTC m=+13.750607288 E0409 17:28:55.392336 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:28:55.392621 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 17:28:55.392606448 +0000 UTC m=+13.788828112 E0409 17:28:55.393004 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:28:55.398199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:28:55.398680 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 17:28:55.398671653 +0000 UTC m=+13.794893297 E0409 17:28:55.408971 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 17:28:55.409128 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:28:55.409190 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:28:55.409256 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 17:28:55.423679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:28:55.423772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:28:55.423850 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 17:28:55.423842015 +0000 UTC m=+13.820063659 I0409 17:28:55.431662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2pjqh" condition "Approved" to 2026-04-09 17:28:55.431649472 +0000 UTC m=+13.827871116 I0409 17:28:55.449506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2pjqh" condition "Ready" to 2026-04-09 17:28:55.449486959 +0000 UTC m=+13.845708663 I0409 17:28:55.473829 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:28:55.473817441 +0000 UTC m=+13.870039085 I0409 17:28:55.490403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:29:00.410129 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:29:00.4101127 +0000 UTC m=+18.806334364 I0409 17:29:23.574145 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:29:23.574421 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 17:29:23.574413776 +0000 UTC m=+41.970635430 I0409 17:29:23.574340 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 17:29:23.574314114 +0000 UTC m=+41.970535758 I0409 17:29:23.589747 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 17:29:23.589730803 +0000 UTC m=+41.985952447 I0409 17:29:23.595435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:29:23.595530 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 17:29:23.595521842 +0000 UTC m=+41.991743476 I0409 17:29:23.877922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:29:23.918592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5sfns" condition "Approved" to 2026-04-09 17:29:23.918582279 +0000 UTC m=+42.314803923 I0409 17:29:23.961115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5sfns" condition "Ready" to 2026-04-09 17:29:23.96110076 +0000 UTC m=+42.357322414 I0409 17:29:23.993665 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:29:23.993649632 +0000 UTC m=+42.389871276 I0409 17:29:24.025656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:29:24.030659 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:29:24.030642724 +0000 UTC m=+42.426864368 I0409 17:29:24.043449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:29:24.052535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:29:24.052842 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:29:24.052834858 +0000 UTC m=+42.449056492 I0409 17:34:29.246909 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-88.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:34:29.246905 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-88.nip.io-tls" condition "Ready" to 2026-04-09 17:34:29.246892489 +0000 UTC m=+347.643114123 I0409 17:34:29.246947 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-88.nip.io-tls" condition "Issuing" to 2026-04-09 17:34:29.246940971 +0000 UTC m=+347.643162615 I0409 17:34:29.271891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-88.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-88.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:34:29.271988 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-88.nip.io-tls" condition "Ready" to 2026-04-09 17:34:29.271974267 +0000 UTC m=+347.668195911 I0409 17:34:29.363202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-88.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-88.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:34:29.395525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-88.nip.io-tls-9lj6n" condition "Approved" to 2026-04-09 17:34:29.395494601 +0000 UTC m=+347.791716245 I0409 17:34:29.432079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-88.nip.io-tls-9lj6n" condition "Ready" to 2026-04-09 17:34:29.432064084 +0000 UTC m=+347.828285738 I0409 17:34:29.469497 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-88.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:34:29.46948019 +0000 UTC m=+347.865701834 I0409 17:34:29.500512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-88.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-88.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:34:29.564884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-88.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-88.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:35:35.579254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:35:35.579293 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 17:35:35.579287276 +0000 UTC m=+413.975508920 I0409 17:35:35.579252 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 17:35:35.579221874 +0000 UTC m=+413.975443528 E0409 17:35:35.595186 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:35:35.595223 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 17:35:35.595214704 +0000 UTC m=+413.991436348 E0409 17:35:35.595381 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:35:35.595964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:35:35.596096 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 17:35:35.596048263 +0000 UTC m=+413.992269907 E0409 17:35:35.610204 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0409 17:35:35.610291 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:35:35.610315 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:35:35.610346 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0409 17:35:35.612086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:35:35.634946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qb2qz" condition "Approved" to 2026-04-09 17:35:35.634935781 +0000 UTC m=+414.031157425 I0409 17:35:35.650553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qb2qz" condition "Ready" to 2026-04-09 17:35:35.650532954 +0000 UTC m=+414.046754608 I0409 17:35:35.674127 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:35:35.674114286 +0000 UTC m=+414.070335930 I0409 17:35:35.692979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:35:35.736669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:35:40.611196 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:35:40.611181557 +0000 UTC m=+419.007403231 I0409 17:36:21.349638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:21.349707 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 17:36:21.349673714 +0000 UTC m=+459.745895338 I0409 17:36:21.355239 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 17:36:21.355224009 +0000 UTC m=+459.751445663 I0409 17:36:21.368071 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 17:36:21.368061313 +0000 UTC m=+459.764282937 I0409 17:36:21.368466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:21.368484 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 17:36:21.368481321 +0000 UTC m=+459.764702955 I0409 17:36:21.368678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:21.368692 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 17:36:21.368689705 +0000 UTC m=+459.764911339 I0409 17:36:21.368743 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 17:36:21.368729865 +0000 UTC m=+459.764951489 I0409 17:36:21.386722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:21.386883 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 17:36:21.386876549 +0000 UTC m=+459.783098183 I0409 17:36:21.406715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:21.406788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:21.406809 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 17:36:21.406803228 +0000 UTC m=+459.803024862 I0409 17:36:21.408594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:21.410550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:21.421521 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 17:36:21.421510896 +0000 UTC m=+459.817732520 I0409 17:36:21.568817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gvwdf" condition "Approved" to 2026-04-09 17:36:21.568809298 +0000 UTC m=+459.965030932 I0409 17:36:21.591639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gvwdf" condition "Ready" to 2026-04-09 17:36:21.591624761 +0000 UTC m=+459.987846435 I0409 17:36:21.635896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:21.653045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:21.653102 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 17:36:21.653068604 +0000 UTC m=+460.049290248 I0409 17:36:21.654365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4bfjf" condition "Approved" to 2026-04-09 17:36:21.654348059 +0000 UTC m=+460.050569703 I0409 17:36:21.680893 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:21.680883952 +0000 UTC m=+460.077105586 I0409 17:36:21.695109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:21.695795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4bfjf" condition "Ready" to 2026-04-09 17:36:21.695785245 +0000 UTC m=+460.092006869 I0409 17:36:21.703253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:21.703603 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:21.703596642 +0000 UTC m=+460.099818276 I0409 17:36:21.831501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5ptpr" condition "Approved" to 2026-04-09 17:36:21.831492636 +0000 UTC m=+460.227714260 I0409 17:36:21.855345 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:21.855336709 +0000 UTC m=+460.251558333 I0409 17:36:21.952249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5ptpr" condition "Ready" to 2026-04-09 17:36:21.952235325 +0000 UTC m=+460.348456969 I0409 17:36:22.285282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:22.285671 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:22.285664453 +0000 UTC m=+460.681886107 I0409 17:36:22.734082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:22.887901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:22.937997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:23.176402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cx6tc" condition "Approved" to 2026-04-09 17:36:23.176392201 +0000 UTC m=+461.572613845 I0409 17:36:23.397888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cx6tc" condition "Ready" to 2026-04-09 17:36:23.39787916 +0000 UTC m=+461.794100794 I0409 17:36:23.686900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:23.938650 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:23.938635804 +0000 UTC m=+462.334857448 I0409 17:36:24.036768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:24.037119 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:24.03711083 +0000 UTC m=+462.433332474 I0409 17:36:24.247908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:32.410623 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:32.410679 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls" condition "Issuing" to 2026-04-09 17:36:32.410667583 +0000 UTC m=+470.806889247 I0409 17:36:32.410886 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls" condition "Ready" to 2026-04-09 17:36:32.410871607 +0000 UTC m=+470.807093241 I0409 17:36:32.431133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:32.431218 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls" condition "Ready" to 2026-04-09 17:36:32.431209973 +0000 UTC m=+470.827431617 I0409 17:36:32.509129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:32.536718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9vtb5-622jh" condition "Approved" to 2026-04-09 17:36:32.536703246 +0000 UTC m=+470.932924890 I0409 17:36:32.554881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9vtb5-622jh" condition "Ready" to 2026-04-09 17:36:32.554873051 +0000 UTC m=+470.951094685 I0409 17:36:32.620738 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:32.62072813 +0000 UTC m=+471.016949764 I0409 17:36:32.652137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9vtb5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:46.092785 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 17:36:46.092727522 +0000 UTC m=+484.488949176 I0409 17:36:46.093360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:46.093378 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 17:36:46.093374504 +0000 UTC m=+484.489596138 I0409 17:36:46.115684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:46.115768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:46.115794 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 17:36:46.115786507 +0000 UTC m=+484.512008151 I0409 17:36:46.259593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:46.267839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-89v9m" condition "Approved" to 2026-04-09 17:36:46.267831561 +0000 UTC m=+484.664053195 I0409 17:36:46.291731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-89v9m" condition "Ready" to 2026-04-09 17:36:46.291718381 +0000 UTC m=+484.687940025 I0409 17:36:46.327939 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:46.327920753 +0000 UTC m=+484.724142437 I0409 17:36:46.346486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:46.361851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:40:13.302972 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 17:40:13.302951298 +0000 UTC m=+691.699172942 I0409 17:40:13.303140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:40:13.303163 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 17:40:13.30315865 +0000 UTC m=+691.699380294 I0409 17:40:13.323214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:40:13.323288 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 17:40:13.32328107 +0000 UTC m=+691.719502714 I0409 17:40:13.499810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:40:13.534214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ldngh" condition "Approved" to 2026-04-09 17:40:13.534197738 +0000 UTC m=+691.930419382 I0409 17:40:13.561044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ldngh" condition "Ready" to 2026-04-09 17:40:13.561034575 +0000 UTC m=+691.957256219 I0409 17:40:13.592319 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:40:13.592305405 +0000 UTC m=+691.988527049 I0409 17:40:13.618963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:40:13.619300 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:40:13.619294003 +0000 UTC m=+692.015515647 I0409 17:40:13.638311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:40:56.726509 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-09 17:40:56.726487676 +0000 UTC m=+735.122709340 I0409 17:40:56.726582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:40:56.728017 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 17:40:56.728003987 +0000 UTC m=+735.124225721 I0409 17:40:56.743521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:40:56.743605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:40:56.743622 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 17:40:56.743615569 +0000 UTC m=+735.139837213 I0409 17:40:57.205755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:40:57.206690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rrzc5" condition "Approved" to 2026-04-09 17:40:57.206682051 +0000 UTC m=+735.602903715 I0409 17:40:57.230175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rrzc5" condition "Ready" to 2026-04-09 17:40:57.230163853 +0000 UTC m=+735.626385497 I0409 17:40:57.272084 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:40:57.272069815 +0000 UTC m=+735.668291459 I0409 17:40:57.296272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"