I0413 17:05:39.669782 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0413 17:05:39.669884 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0413 17:05:39.670066 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0413 17:05:39.674613 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0413 17:05:39.675318 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0413 17:05:39.675353 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0413 17:05:39.675445 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0413 17:05:39.679387 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0413 17:05:39.697310 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0413 17:05:39.700665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0413 17:05:39.703625 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0413 17:05:39.706896 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0413 17:05:39.706987 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0413 17:05:39.713517 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0413 17:05:39.713590 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0413 17:05:39.718215 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0413 17:05:39.722609 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0413 17:05:39.725979 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0413 17:05:39.727834 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0413 17:05:39.729857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0413 17:05:39.731644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0413 17:05:39.733464 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0413 17:05:39.735259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0413 17:05:39.742217 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0413 17:05:39.742295 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0413 17:05:39.742342 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0413 17:05:39.742512 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0413 17:05:39.747434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0413 17:05:39.750570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0413 17:05:39.752561 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0413 17:05:39.754563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0413 17:05:39.756528 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0413 17:05:39.756976 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0413 17:05:39.758652 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:05:39.759385 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:05:39.759424 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:05:39.759855 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:05:39.759989 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:05:39.760086 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:05:39.761782 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:05:39.762418 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:05:39.763460 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:05:39.845970 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:05:53.008753 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-13 17:05:53.008736429 +0000 UTC m=+13.367194847 I0413 17:05:53.735411 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 17:05:53.735400811 +0000 UTC m=+14.093859189 I0413 17:05:53.736132 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:05:53.736169 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 17:05:53.736161862 +0000 UTC m=+14.094620250 I0413 17:05:53.753058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:05:53.753228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:05:53.753276 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 17:05:53.753249658 +0000 UTC m=+14.111708046 E0413 17:05:53.753553 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 17:05:53.754082 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-13 17:05:53.754069222 +0000 UTC m=+14.112527640 E0413 17:05:53.754132 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:05:53.780721 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0413 17:05:53.780824 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:05:53.780880 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:05:53.780923 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0413 17:05:53.801885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-khm59" condition "Approved" to 2026-04-13 17:05:53.801873329 +0000 UTC m=+14.160331717 I0413 17:05:53.816901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-khm59" condition "Ready" to 2026-04-13 17:05:53.816887286 +0000 UTC m=+14.175345664 I0413 17:05:53.842106 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:05:53.842089652 +0000 UTC m=+14.200548030 I0413 17:05:53.861130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:05:53.861439 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:05:53.861431931 +0000 UTC m=+14.219890319 I0413 17:05:53.872141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:05:53.880839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:05:58.781170 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:05:58.781140437 +0000 UTC m=+19.139598825 I0413 17:06:19.386529 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 17:06:19.386482567 +0000 UTC m=+39.744940965 I0413 17:06:19.386973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:06:19.388923 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 17:06:19.388908819 +0000 UTC m=+39.747367247 I0413 17:06:19.406268 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-13 17:06:19.406259809 +0000 UTC m=+39.764718187 I0413 17:06:19.406934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:06:19.407026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:06:19.407043 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 17:06:19.407039102 +0000 UTC m=+39.765497480 I0413 17:06:19.683762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:06:19.694428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-698cs" condition "Approved" to 2026-04-13 17:06:19.694416398 +0000 UTC m=+40.052874796 I0413 17:06:19.728742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-698cs" condition "Ready" to 2026-04-13 17:06:19.728729025 +0000 UTC m=+40.087187423 I0413 17:06:19.760414 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:06:19.760403413 +0000 UTC m=+40.118861791 I0413 17:06:19.782052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:06:19.782633 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:06:19.782622459 +0000 UTC m=+40.141080877 I0413 17:06:19.807081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:10:41.503113 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-63.nip.io-tls" condition "Ready" to 2026-04-13 17:10:41.503065958 +0000 UTC m=+301.861524346 I0413 17:10:41.503305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-63.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:10:41.503369 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-63.nip.io-tls" condition "Issuing" to 2026-04-13 17:10:41.503361497 +0000 UTC m=+301.861819885 I0413 17:10:41.518636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-63.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-63.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:10:41.518696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-63.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:10:41.518710 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-63.nip.io-tls" condition "Issuing" to 2026-04-13 17:10:41.518704266 +0000 UTC m=+301.877162644 I0413 17:10:41.867635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-63.nip.io-tls-89r2n" condition "Approved" to 2026-04-13 17:10:41.86761917 +0000 UTC m=+302.226077638 I0413 17:10:41.894097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-63.nip.io-tls-89r2n" condition "Ready" to 2026-04-13 17:10:41.894085534 +0000 UTC m=+302.252543922 I0413 17:10:41.920493 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-63.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:10:41.920475865 +0000 UTC m=+302.278934253 I0413 17:10:41.939921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-63.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-63.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:11:48.098289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:11:48.098320 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 17:11:48.098301046 +0000 UTC m=+368.456759454 I0413 17:11:48.098346 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 17:11:48.098334767 +0000 UTC m=+368.456793175 E0413 17:11:48.113323 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 17:11:48.113384 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-13 17:11:48.113371205 +0000 UTC m=+368.471829623 E0413 17:11:48.113471 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 17:11:48.118172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:11:48.118266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:11:48.118302 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 17:11:48.118284703 +0000 UTC m=+368.476743091 E0413 17:11:48.126903 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0413 17:11:48.127007 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:11:48.127038 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:11:48.127073 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0413 17:11:48.168665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qvdh4" condition "Approved" to 2026-04-13 17:11:48.168654216 +0000 UTC m=+368.527112604 I0413 17:11:48.170024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:11:48.185706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qvdh4" condition "Ready" to 2026-04-13 17:11:48.185689795 +0000 UTC m=+368.544148183 I0413 17:11:48.208723 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:11:48.208708715 +0000 UTC m=+368.567167103 I0413 17:11:48.226162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:11:48.226435 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:11:48.226427324 +0000 UTC m=+368.584885702 I0413 17:11:48.245592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:11:48.245892 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:11:48.245882956 +0000 UTC m=+368.604341344 I0413 17:11:53.127785 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:11:53.127770916 +0000 UTC m=+373.486229324 I0413 17:12:34.753236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:34.753818 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 17:12:34.753777025 +0000 UTC m=+415.112235403 I0413 17:12:34.753858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:34.757928 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 17:12:34.757919673 +0000 UTC m=+415.116378051 I0413 17:12:34.753897 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 17:12:34.753894848 +0000 UTC m=+415.112353226 I0413 17:12:34.757822 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 17:12:34.757808119 +0000 UTC m=+415.116266487 I0413 17:12:34.753909 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 17:12:34.753907469 +0000 UTC m=+415.112365847 I0413 17:12:34.753924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:34.758650 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 17:12:34.758644845 +0000 UTC m=+415.117103213 I0413 17:12:34.811836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:34.811893 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 17:12:34.811886663 +0000 UTC m=+415.170345041 I0413 17:12:34.816390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:34.816749 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 17:12:34.816740633 +0000 UTC m=+415.175199041 I0413 17:12:34.821045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:34.821095 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 17:12:34.821087828 +0000 UTC m=+415.179546206 I0413 17:12:35.068315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:35.086564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:35.111447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t4q8n" condition "Approved" to 2026-04-13 17:12:35.111434164 +0000 UTC m=+415.469892542 I0413 17:12:35.156010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t4q8n" condition "Ready" to 2026-04-13 17:12:35.155998544 +0000 UTC m=+415.514456922 I0413 17:12:35.193885 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:35.193877117 +0000 UTC m=+415.552335495 I0413 17:12:35.215650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:35.222546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:35.260553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dbnrl" condition "Approved" to 2026-04-13 17:12:35.260542721 +0000 UTC m=+415.619001099 I0413 17:12:35.279797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dbnrl" condition "Ready" to 2026-04-13 17:12:35.279788176 +0000 UTC m=+415.638246544 I0413 17:12:35.280716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0413 17:12:35.479246 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-hvl7h\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0413 17:12:35.542474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8fkbs" condition "Approved" to 2026-04-13 17:12:35.542459288 +0000 UTC m=+415.900917666 I0413 17:12:35.583530 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:35.583507399 +0000 UTC m=+415.941965777 E0413 17:12:35.628205 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-qdtg7\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0413 17:12:35.693817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8fkbs" condition "Ready" to 2026-04-13 17:12:35.693808584 +0000 UTC m=+416.052266962 I0413 17:12:36.096925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:36.337645 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:36.337633359 +0000 UTC m=+416.696091747 I0413 17:12:36.485170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:36.485557 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:36.485550089 +0000 UTC m=+416.844008467 I0413 17:12:36.835092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:43.081796 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9phfd-tls" condition "Ready" to 2026-04-13 17:12:43.081778278 +0000 UTC m=+423.440236666 I0413 17:12:43.081888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9phfd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:43.081919 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9phfd-tls" condition "Issuing" to 2026-04-13 17:12:43.081911832 +0000 UTC m=+423.440370220 I0413 17:12:43.097037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9phfd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9phfd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:43.097113 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9phfd-tls" condition "Ready" to 2026-04-13 17:12:43.097106013 +0000 UTC m=+423.455564401 I0413 17:12:43.485902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9phfd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9phfd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:43.519277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9phfd-h8wbf" condition "Approved" to 2026-04-13 17:12:43.519250373 +0000 UTC m=+423.877708761 I0413 17:12:43.544043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9phfd-h8wbf" condition "Ready" to 2026-04-13 17:12:43.544034202 +0000 UTC m=+423.902492580 I0413 17:12:43.575122 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9phfd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:43.575112737 +0000 UTC m=+423.933571115 I0413 17:12:43.600031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9phfd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9phfd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:55.414465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:55.414502 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 17:12:55.414490179 +0000 UTC m=+435.772948567 I0413 17:12:55.415041 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 17:12:55.415034436 +0000 UTC m=+435.773492824 I0413 17:12:55.434896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:55.434987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:55.435002 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 17:12:55.434997217 +0000 UTC m=+435.793455595 I0413 17:12:55.591160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kh7xm" condition "Approved" to 2026-04-13 17:12:55.591145438 +0000 UTC m=+435.949603816 I0413 17:12:55.623357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kh7xm" condition "Ready" to 2026-04-13 17:12:55.62334602 +0000 UTC m=+435.981804398 I0413 17:12:55.671451 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:55.671435808 +0000 UTC m=+436.029894206 I0413 17:12:55.696747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:55.697085 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:55.697078737 +0000 UTC m=+436.055537125 I0413 17:12:55.702650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:55.722737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:55.723166 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:55.723157198 +0000 UTC m=+436.081615586 I0413 17:16:08.704542 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 17:16:08.70451567 +0000 UTC m=+629.062974058 I0413 17:16:08.705146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:16:08.705165 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 17:16:08.70516136 +0000 UTC m=+629.063619748 I0413 17:16:08.725160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:08.725211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:16:08.725350 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 17:16:08.725217611 +0000 UTC m=+629.083675989 I0413 17:16:08.943539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-czvrv" condition "Approved" to 2026-04-13 17:16:08.943529863 +0000 UTC m=+629.301988231 I0413 17:16:08.962265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-czvrv" condition "Ready" to 2026-04-13 17:16:08.962256241 +0000 UTC m=+629.320714619 I0413 17:16:08.995836 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:16:08.995820023 +0000 UTC m=+629.354278411 I0413 17:16:09.013418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:09.013702 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:16:09.013693183 +0000 UTC m=+629.372151571 I0413 17:16:09.041246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:50.968624 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-13 17:16:50.968609924 +0000 UTC m=+671.327068352 I0413 17:16:50.968822 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:16:50.968850 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-13 17:16:50.968844581 +0000 UTC m=+671.327302979 I0413 17:16:50.982403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:50.982532 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-13 17:16:50.982461327 +0000 UTC m=+671.340919705 I0413 17:16:51.084679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:51.323369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wqcxz" condition "Approved" to 2026-04-13 17:16:51.323356036 +0000 UTC m=+671.681814424 I0413 17:16:51.347364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wqcxz" condition "Ready" to 2026-04-13 17:16:51.347353414 +0000 UTC m=+671.705811792 I0413 17:16:51.594918 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" resource_name="horizon-int-certs" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="horizon-int-certs-wqcxz" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="horizon-int-certs-zfbx4" resource_namespace="openstack" resource_kind="Secret" resource_version="v1" I0413 17:16:51.622635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vl5cl" condition "Approved" to 2026-04-13 17:16:51.622624072 +0000 UTC m=+671.981082460 I0413 17:16:51.636259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vl5cl" condition "Ready" to 2026-04-13 17:16:51.636248758 +0000 UTC m=+671.994707156 I0413 17:16:51.660385 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:16:51.66037656 +0000 UTC m=+672.018834938 I0413 17:16:51.688133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:51.688599 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:16:51.688591673 +0000 UTC m=+672.047050061 I0413 17:16:51.705449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:51.705727 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:16:51.705719061 +0000 UTC m=+672.064177459