I0416 22:45:41.742369 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0416 22:45:41.742519 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0416 22:45:41.742609 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0416 22:45:41.746543 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0416 22:45:41.747326 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0416 22:45:41.747454 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0416 22:45:41.747455 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0416 22:45:41.749836 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0416 22:45:41.767797 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0416 22:45:41.774484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0416 22:45:41.779218 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0416 22:45:41.781817 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0416 22:45:41.784034 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0416 22:45:41.785912 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0416 22:45:41.785968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0416 22:45:41.787896 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0416 22:45:41.791379 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0416 22:45:41.798005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0416 22:45:41.800664 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0416 22:45:41.800688 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0416 22:45:41.800696 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0416 22:45:41.800704 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0416 22:45:41.800759 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0416 22:45:41.803292 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0416 22:45:41.805431 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0416 22:45:41.807266 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0416 22:45:41.808952 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0416 22:45:41.809015 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0416 22:45:41.810914 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0416 22:45:41.812867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0416 22:45:41.816173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0416 22:45:41.823220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0416 22:45:41.826489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0416 22:45:41.828592 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:45:41.830223 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:45:41.831094 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:45:41.851899 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:45:41.866184 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:45:41.880937 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:45:41.895167 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:45:41.908256 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:45:41.916771 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:45:41.933422 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 22:45:54.424478 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 22:45:54.424446068 +0000 UTC m=+12.721177429 I0416 22:45:55.198217 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 22:45:55.198205294 +0000 UTC m=+13.494936655 I0416 22:45:55.198842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:45:55.198904 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 22:45:55.198890819 +0000 UTC m=+13.495622200 E0416 22:45:55.214997 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 22:45:55.215054 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 22:45:55.215047929 +0000 UTC m=+13.511779290 E0416 22:45:55.215143 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 22:45:55.215937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:45:55.215981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:45:55.216105 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 22:45:55.216057236 +0000 UTC m=+13.512788597 E0416 22:45:55.228818 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0416 22:45:55.229119 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 22:45:55.229233 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 22:45:55.229469 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0416 22:45:55.258584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:45:55.259619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sk5q2" condition "Approved" to 2026-04-16 22:45:55.259602767 +0000 UTC m=+13.556334148 I0416 22:45:55.277836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sk5q2" condition "Ready" to 2026-04-16 22:45:55.277822292 +0000 UTC m=+13.574553653 I0416 22:45:55.307754 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:45:55.307722574 +0000 UTC m=+13.604453945 I0416 22:45:55.324924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:45:55.325337 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:45:55.325326666 +0000 UTC m=+13.622058047 I0416 22:45:55.341417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:45:55.343804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:46:00.229942 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:46:00.229925945 +0000 UTC m=+18.526657346 I0416 22:46:23.727458 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 22:46:23.727403499 +0000 UTC m=+42.024134860 I0416 22:46:23.727836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:46:23.729388 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 22:46:23.729373382 +0000 UTC m=+42.026104783 I0416 22:46:23.742014 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 22:46:23.742003656 +0000 UTC m=+42.038735027 I0416 22:46:23.748682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:46:23.748889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:46:23.748936 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 22:46:23.74891146 +0000 UTC m=+42.045642821 I0416 22:46:24.258990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:46:24.265982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8fghl" condition "Approved" to 2026-04-16 22:46:24.265971479 +0000 UTC m=+42.562702860 I0416 22:46:24.308814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8fghl" condition "Ready" to 2026-04-16 22:46:24.308801323 +0000 UTC m=+42.605532684 I0416 22:46:24.341406 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:46:24.341392228 +0000 UTC m=+42.638123589 I0416 22:46:24.366531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:46:24.367019 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:46:24.36700884 +0000 UTC m=+42.663740221 I0416 22:46:24.374569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:46:24.388125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:51:14.316007 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready" to 2026-04-16 22:51:14.315951418 +0000 UTC m=+332.612682799 I0416 22:51:14.316237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:51:14.316251 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Issuing" to 2026-04-16 22:51:14.316248425 +0000 UTC m=+332.612979776 I0416 22:51:14.332451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:51:14.332506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:51:14.332516 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Issuing" to 2026-04-16 22:51:14.332512133 +0000 UTC m=+332.629243484 I0416 22:51:14.528448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:51:14.538682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-169.nip.io-tls-8kq7d" condition "Approved" to 2026-04-16 22:51:14.538675804 +0000 UTC m=+332.835407165 I0416 22:51:14.566989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-169.nip.io-tls-8kq7d" condition "Ready" to 2026-04-16 22:51:14.566980829 +0000 UTC m=+332.863712190 I0416 22:51:14.593135 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:51:14.593125873 +0000 UTC m=+332.889857234 I0416 22:51:14.612860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:52:19.692274 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:52:19.692377 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 22:52:19.69232361 +0000 UTC m=+397.989055001 I0416 22:52:19.692650 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 22:52:19.692624376 +0000 UTC m=+397.989355757 E0416 22:52:19.720618 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 22:52:19.720675 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-16 22:52:19.720662979 +0000 UTC m=+398.017394360 E0416 22:52:19.720741 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 22:52:19.734542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:52:19.734684 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 22:52:19.734607472 +0000 UTC m=+398.031338833 E0416 22:52:19.809458 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0416 22:52:19.809578 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 22:52:19.809615 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 22:52:19.809643 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0416 22:52:19.814356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:52:19.830653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k44jf" condition "Approved" to 2026-04-16 22:52:19.830639394 +0000 UTC m=+398.127370735 I0416 22:52:19.843857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k44jf" condition "Ready" to 2026-04-16 22:52:19.843847864 +0000 UTC m=+398.140579225 I0416 22:52:19.869470 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:52:19.86944735 +0000 UTC m=+398.166178741 I0416 22:52:19.889798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:52:24.811975 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:52:24.811960592 +0000 UTC m=+403.108691973 I0416 22:53:06.690414 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 22:53:06.690401104 +0000 UTC m=+444.987132465 I0416 22:53:06.690806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:53:06.690829 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 22:53:06.690825491 +0000 UTC m=+444.987556852 I0416 22:53:06.693318 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 22:53:06.693305913 +0000 UTC m=+444.990037274 I0416 22:53:06.695682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:53:06.695726 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 22:53:06.695719313 +0000 UTC m=+444.992450654 I0416 22:53:06.708551 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 22:53:06.708538098 +0000 UTC m=+445.005269449 I0416 22:53:06.712484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:53:06.712524 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 22:53:06.712517234 +0000 UTC m=+445.009248585 I0416 22:53:06.736294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:06.740354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:53:06.740387 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 22:53:06.740380619 +0000 UTC m=+445.037111970 I0416 22:53:06.746135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:06.746181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:53:06.747081 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 22:53:06.747075401 +0000 UTC m=+445.043806742 I0416 22:53:06.748073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:06.748188 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 22:53:06.748178119 +0000 UTC m=+445.044909490 I0416 22:53:06.920602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hnf84" condition "Approved" to 2026-04-16 22:53:06.920584166 +0000 UTC m=+445.217315557 I0416 22:53:06.957999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hnf84" condition "Ready" to 2026-04-16 22:53:06.957987451 +0000 UTC m=+445.254718802 I0416 22:53:06.987160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:07.103782 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:53:07.103874 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 22:53:07.103838611 +0000 UTC m=+445.400569952 I0416 22:53:07.174787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tvr77" condition "Approved" to 2026-04-16 22:53:07.174772061 +0000 UTC m=+445.471503412 I0416 22:53:07.187774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:07.189136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hnf8r" condition "Approved" to 2026-04-16 22:53:07.18912772 +0000 UTC m=+445.485859061 I0416 22:53:07.192884 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:53:07.192861043 +0000 UTC m=+445.489592394 I0416 22:53:07.225539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tvr77" condition "Ready" to 2026-04-16 22:53:07.225528216 +0000 UTC m=+445.522259567 I0416 22:53:07.229814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hnf8r" condition "Ready" to 2026-04-16 22:53:07.229804508 +0000 UTC m=+445.526535859 I0416 22:53:07.529600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5mgmx" condition "Approved" to 2026-04-16 22:53:07.529573748 +0000 UTC m=+445.826305109 I0416 22:53:07.989823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5mgmx" condition "Ready" to 2026-04-16 22:53:07.989801281 +0000 UTC m=+446.286532672 I0416 22:53:08.093708 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:53:08.093694577 +0000 UTC m=+446.390425918 I0416 22:53:08.370359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:08.370862 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:53:08.370854331 +0000 UTC m=+446.667585692 I0416 22:53:08.524500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:08.724501 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:53:08.724487794 +0000 UTC m=+447.021219145 I0416 22:53:08.925752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:08.926123 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:53:08.926096012 +0000 UTC m=+447.222827373 I0416 22:53:08.972000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:09.326240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:15.853172 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls" condition "Ready" to 2026-04-16 22:53:15.853124086 +0000 UTC m=+454.149855467 I0416 22:53:15.854091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:53:15.854131 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls" condition "Issuing" to 2026-04-16 22:53:15.854123802 +0000 UTC m=+454.150855193 I0416 22:53:15.871311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:15.871396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:53:15.871512 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls" condition "Issuing" to 2026-04-16 22:53:15.871500977 +0000 UTC m=+454.168232338 I0416 22:53:16.000732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h2gc7-sp6pv" condition "Approved" to 2026-04-16 22:53:16.000712688 +0000 UTC m=+454.297444079 I0416 22:53:16.021447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h2gc7-sp6pv" condition "Ready" to 2026-04-16 22:53:16.021433035 +0000 UTC m=+454.318164396 I0416 22:53:16.061825 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:53:16.061808904 +0000 UTC m=+454.358540265 I0416 22:53:16.089352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:16.089677 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:53:16.089670728 +0000 UTC m=+454.386402079 I0416 22:53:16.111376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h2gc7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:29.572870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:53:29.572901 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 22:53:29.572894843 +0000 UTC m=+467.869626194 I0416 22:53:29.572964 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 22:53:29.572941153 +0000 UTC m=+467.869672504 I0416 22:53:29.590333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:29.590446 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 22:53:29.590435751 +0000 UTC m=+467.887167132 I0416 22:53:30.130914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:30.164435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-txhhg" condition "Approved" to 2026-04-16 22:53:30.164409181 +0000 UTC m=+468.461140542 I0416 22:53:30.186404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-txhhg" condition "Ready" to 2026-04-16 22:53:30.186391189 +0000 UTC m=+468.483122550 I0416 22:53:30.218061 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:53:30.218045539 +0000 UTC m=+468.514776910 I0416 22:53:30.241050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:30.244308 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:53:30.241300996 +0000 UTC m=+468.538032357 I0416 22:53:30.253045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:53:30.270492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:56:46.702875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:56:46.702915 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 22:56:46.702906252 +0000 UTC m=+664.999637613 I0416 22:56:46.703414 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 22:56:46.703399779 +0000 UTC m=+665.000131140 I0416 22:56:46.725275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:56:46.725339 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 22:56:46.725335022 +0000 UTC m=+665.022066383 I0416 22:56:46.913057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:56:46.946324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gfkcx" condition "Approved" to 2026-04-16 22:56:46.946311353 +0000 UTC m=+665.243042714 I0416 22:56:46.970296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gfkcx" condition "Ready" to 2026-04-16 22:56:46.970287273 +0000 UTC m=+665.267018624 I0416 22:56:47.006392 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:56:47.006377134 +0000 UTC m=+665.303108495 I0416 22:56:47.027236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:56:47.027629 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:56:47.027622649 +0000 UTC m=+665.324354000 I0416 22:56:47.057355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:57:33.101168 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 22:57:33.101144588 +0000 UTC m=+711.397875979 I0416 22:57:33.101560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 22:57:33.101596 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-16 22:57:33.101586374 +0000 UTC m=+711.398317735 I0416 22:57:33.120527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:57:33.120617 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 22:57:33.120608416 +0000 UTC m=+711.417339777 I0416 22:57:33.319238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:57:33.354936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-w8qpq" condition "Approved" to 2026-04-16 22:57:33.354918839 +0000 UTC m=+711.651650210 I0416 22:57:33.377258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-w8qpq" condition "Ready" to 2026-04-16 22:57:33.377248061 +0000 UTC m=+711.673979412 I0416 22:57:33.411145 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 22:57:33.411125375 +0000 UTC m=+711.707856746 I0416 22:57:33.432303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 22:57:33.482998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"