I0407 09:35:02.577270 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 09:35:02.577413 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 09:35:02.577489 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 09:35:02.580157 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 09:35:02.580450 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 09:35:02.580511 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 09:35:02.580713 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 09:35:02.582446 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 09:35:02.594110 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 09:35:02.602396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 09:35:02.606169 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 09:35:02.609092 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 09:35:02.611488 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 09:35:02.611511 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 09:35:02.611516 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 09:35:02.614033 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 09:35:02.616114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 09:35:02.617785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 09:35:02.622802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 09:35:02.624971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 09:35:02.627801 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 09:35:02.627874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 09:35:02.630840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 09:35:02.634769 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 09:35:02.636374 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 09:35:02.636510 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 09:35:02.638618 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 09:35:02.640235 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 09:35:02.640253 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 09:35:02.640308 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 09:35:02.642489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 09:35:02.645598 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 09:35:02.649730 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 09:35:02.651593 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:35:02.652410 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:35:02.654615 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:35:02.676119 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:35:02.690493 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:35:02.701694 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:35:02.723524 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:35:02.739450 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:35:02.743989 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:35:02.756990 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:35:25.854730 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 09:35:25.854718855 +0000 UTC m=+23.315246890 I0407 09:35:26.616196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:35:26.616231 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 09:35:26.616207542 +0000 UTC m=+24.076735597 I0407 09:35:26.616244 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 09:35:26.616234692 +0000 UTC m=+24.076762717 E0407 09:35:26.629767 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 09:35:26.629821 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 09:35:26.629816944 +0000 UTC m=+24.090344969 E0407 09:35:26.629837 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 09:35:26.633919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:35:26.634001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:35:26.634026 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 09:35:26.63401987 +0000 UTC m=+24.094547895 E0407 09:35:26.643700 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 09:35:26.643779 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 09:35:26.643809 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 09:35:26.643844 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 09:35:26.665910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:35:26.674598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b5xrw" condition "Approved" to 2026-04-07 09:35:26.674586891 +0000 UTC m=+24.135114926 I0407 09:35:26.688107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b5xrw" condition "Ready" to 2026-04-07 09:35:26.688096922 +0000 UTC m=+24.148624957 I0407 09:35:26.708820 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:35:26.708805034 +0000 UTC m=+24.169333099 I0407 09:35:26.731273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:35:26.731577 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:35:26.731571017 +0000 UTC m=+24.192099052 I0407 09:35:26.737551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:35:26.745915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:35:31.644418 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:35:31.64439656 +0000 UTC m=+29.104924625 I0407 09:35:54.252135 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 09:35:54.252117998 +0000 UTC m=+51.712646053 I0407 09:35:54.252717 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:35:54.252751 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 09:35:54.252744153 +0000 UTC m=+51.713272218 I0407 09:35:54.268590 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 09:35:54.268578498 +0000 UTC m=+51.729106523 I0407 09:35:54.284607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:35:54.284702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:35:54.284732 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 09:35:54.284726549 +0000 UTC m=+51.745254584 I0407 09:35:54.564894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:35:54.573502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j5wbw" condition "Approved" to 2026-04-07 09:35:54.573486277 +0000 UTC m=+52.034014342 I0407 09:35:54.599578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j5wbw" condition "Ready" to 2026-04-07 09:35:54.599567613 +0000 UTC m=+52.060095648 I0407 09:35:54.636820 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:35:54.636792623 +0000 UTC m=+52.097320688 I0407 09:35:54.665264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:39:56.685601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:39:56.685956 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready" to 2026-04-07 09:39:56.685945514 +0000 UTC m=+294.146473579 I0407 09:39:56.685702 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-04-07 09:39:56.685688038 +0000 UTC m=+294.146216173 I0407 09:39:56.702652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:39:56.702773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:39:56.705668 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-04-07 09:39:56.705659503 +0000 UTC m=+294.166187548 I0407 09:39:57.489475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-822x6" condition "Approved" to 2026-04-07 09:39:57.489460049 +0000 UTC m=+294.949988084 I0407 09:39:57.524747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-822x6" condition "Ready" to 2026-04-07 09:39:57.524733411 +0000 UTC m=+294.985261446 I0407 09:39:57.569048 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:39:57.569034252 +0000 UTC m=+295.029562277 I0407 09:39:57.589923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:39:57.646368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:01.737486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:41:01.737531 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 09:41:01.737520838 +0000 UTC m=+359.198048893 I0407 09:41:01.737539 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 09:41:01.737512038 +0000 UTC m=+359.198040133 E0407 09:41:01.750594 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 09:41:01.751777 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 09:41:01.751764012 +0000 UTC m=+359.212292047 E0407 09:41:01.751917 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 09:41:01.753914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:01.754056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:41:01.754110 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 09:41:01.754093889 +0000 UTC m=+359.214621924 E0407 09:41:01.765634 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 09:41:01.765765 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 09:41:01.765795 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 09:41:01.765845 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 09:41:01.828742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:01.829727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5bwf6" condition "Approved" to 2026-04-07 09:41:01.829706939 +0000 UTC m=+359.290235004 I0407 09:41:01.884193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5bwf6" condition "Ready" to 2026-04-07 09:41:01.884177676 +0000 UTC m=+359.344705741 I0407 09:41:01.926232 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:41:01.926222304 +0000 UTC m=+359.386750339 I0407 09:41:01.952824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:06.766678 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:41:06.766663815 +0000 UTC m=+364.227191870 I0407 09:41:45.597577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:41:45.597613 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 09:41:45.597607786 +0000 UTC m=+403.058135821 I0407 09:41:45.597764 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 09:41:45.59776029 +0000 UTC m=+403.058288315 I0407 09:41:45.617573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:41:45.617667 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 09:41:45.61765959 +0000 UTC m=+403.078187625 I0407 09:41:45.618177 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 09:41:45.618172702 +0000 UTC m=+403.078700727 I0407 09:41:45.633564 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 09:41:45.63355215 +0000 UTC m=+403.094080175 I0407 09:41:45.634428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:41:45.634447 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 09:41:45.634443183 +0000 UTC m=+403.094971208 I0407 09:41:45.641996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:45.642102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:41:45.642172 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 09:41:45.642165492 +0000 UTC m=+403.102693517 I0407 09:41:45.646307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:45.646542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:41:45.646572 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 09:41:45.646565391 +0000 UTC m=+403.107093426 I0407 09:41:45.660052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:45.660116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:41:45.660134 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 09:41:45.660129494 +0000 UTC m=+403.120657519 I0407 09:41:45.814654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:45.845107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cdclb" condition "Approved" to 2026-04-07 09:41:45.845099506 +0000 UTC m=+403.305627521 I0407 09:41:45.862729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sbdrm" condition "Approved" to 2026-04-07 09:41:45.862721069 +0000 UTC m=+403.323249094 I0407 09:41:45.884176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cdclb" condition "Ready" to 2026-04-07 09:41:45.884168967 +0000 UTC m=+403.344696992 I0407 09:41:45.909392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sbdrm" condition "Ready" to 2026-04-07 09:41:45.909384828 +0000 UTC m=+403.369912853 I0407 09:41:45.980737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:41:45.980767 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 09:41:45.980761304 +0000 UTC m=+403.441289319 I0407 09:41:45.992673 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:41:45.992662897 +0000 UTC m=+403.453190922 I0407 09:41:45.992741 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:41:45.992732519 +0000 UTC m=+403.453260544 I0407 09:41:46.014597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:46.014841 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:41:46.014833802 +0000 UTC m=+403.475361827 I0407 09:41:46.037957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:46.086037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:46.087012 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:41:46.087003389 +0000 UTC m=+403.547531424 I0407 09:41:46.148643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xrrn4" condition "Approved" to 2026-04-07 09:41:46.148629406 +0000 UTC m=+403.609157461 E0407 09:41:46.546795 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-cd2hc\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0407 09:41:46.682806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xrrn4" condition "Ready" to 2026-04-07 09:41:46.682796134 +0000 UTC m=+404.143324169 I0407 09:41:46.938548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:46.990017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:47.120088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-56c9f" condition "Approved" to 2026-04-07 09:41:47.120073558 +0000 UTC m=+404.580601603 I0407 09:41:47.601578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-56c9f" condition "Ready" to 2026-04-07 09:41:47.601564484 +0000 UTC m=+405.062092509 I0407 09:41:47.639872 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:41:47.639858887 +0000 UTC m=+405.100386922 I0407 09:41:47.894039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:48.189986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:48.590767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:48.738356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:53.793094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:41:53.793146 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" condition "Issuing" to 2026-04-07 09:41:53.793134072 +0000 UTC m=+411.253662107 I0407 09:41:53.793272 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" condition "Ready" to 2026-04-07 09:41:53.793248215 +0000 UTC m=+411.253776280 I0407 09:41:53.815665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-smlsr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:53.815816 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" condition "Ready" to 2026-04-07 09:41:53.815785191 +0000 UTC m=+411.276313226 I0407 09:41:53.912144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-smlsr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:53.948002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-smlsr-zj2rh" condition "Approved" to 2026-04-07 09:41:53.947991752 +0000 UTC m=+411.408519797 I0407 09:41:53.966541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-smlsr-zj2rh" condition "Ready" to 2026-04-07 09:41:53.966531579 +0000 UTC m=+411.427059604 I0407 09:41:53.998457 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:41:53.998438926 +0000 UTC m=+411.458966961 I0407 09:41:54.019033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-smlsr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:54.019414 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:41:54.019403224 +0000 UTC m=+411.479931259 I0407 09:41:54.038093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-smlsr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:41:54.040699 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:41:54.040688979 +0000 UTC m=+411.501217034 I0407 09:41:54.041335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-smlsr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-smlsr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:42:04.782086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:42:04.782118 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 09:42:04.782110498 +0000 UTC m=+422.242638533 I0407 09:42:04.782421 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 09:42:04.782407115 +0000 UTC m=+422.242935130 I0407 09:42:04.795949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:42:04.796089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:42:04.796174 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 09:42:04.796162266 +0000 UTC m=+422.256690351 I0407 09:42:05.291593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zj458" condition "Approved" to 2026-04-07 09:42:05.291580996 +0000 UTC m=+422.752109011 I0407 09:42:05.306622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zj458" condition "Ready" to 2026-04-07 09:42:05.306615988 +0000 UTC m=+422.767144003 I0407 09:42:05.349683 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:42:05.349672723 +0000 UTC m=+422.810200748 I0407 09:42:05.378390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:42:05.451251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:45:20.161187 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 09:45:20.1611701 +0000 UTC m=+617.621698135 I0407 09:45:20.161331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:45:20.161370 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 09:45:20.161362715 +0000 UTC m=+617.621890740 I0407 09:45:20.176236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:45:20.176293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:45:20.176307 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 09:45:20.176301974 +0000 UTC m=+617.636830009 I0407 09:45:20.401297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:45:20.411876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xsfj4" condition "Approved" to 2026-04-07 09:45:20.41185788 +0000 UTC m=+617.872385895 I0407 09:45:20.436160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xsfj4" condition "Ready" to 2026-04-07 09:45:20.436150238 +0000 UTC m=+617.896678273 I0407 09:45:20.467186 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:45:20.467170266 +0000 UTC m=+617.927698301 I0407 09:45:20.486515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"