I0410 01:03:05.147131 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0410 01:03:05.147317 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0410 01:03:05.147472 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0410 01:03:05.154608 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0410 01:03:05.155131 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0410 01:03:05.155157 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0410 01:03:05.155169 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0410 01:03:05.159292 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0410 01:03:05.171636 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0410 01:03:05.176976 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0410 01:03:05.181450 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0410 01:03:05.187267 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0410 01:03:05.187396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0410 01:03:05.190297 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0410 01:03:05.190322 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0410 01:03:05.190399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0410 01:03:05.193071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0410 01:03:05.196898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0410 01:03:05.199679 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0410 01:03:05.201573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0410 01:03:05.203598 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0410 01:03:05.209182 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0410 01:03:05.210755 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0410 01:03:05.210848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0410 01:03:05.212759 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0410 01:03:05.214972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0410 01:03:05.216970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0410 01:03:05.219169 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0410 01:03:05.221180 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0410 01:03:05.223034 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0410 01:03:05.225506 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0410 01:03:05.225536 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0410 01:03:05.226115 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0410 01:03:05.229058 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 01:03:05.232560 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 01:03:05.233044 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 01:03:05.252026 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 01:03:05.264363 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 01:03:05.290308 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 01:03:05.328186 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 01:03:05.336959 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 01:03:05.353019 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 01:03:05.373755 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 01:03:17.762124 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-10 01:03:17.762105814 +0000 UTC m=+12.643249461 I0410 01:03:18.472958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:03:18.473023 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 01:03:18.473013939 +0000 UTC m=+13.354157606 I0410 01:03:18.473504 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-10 01:03:18.473492864 +0000 UTC m=+13.354636531 E0410 01:03:18.500113 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 01:03:18.500314 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-10 01:03:18.500301971 +0000 UTC m=+13.381445648 E0410 01:03:18.500415 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 01:03:18.502357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:03:18.502498 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-10 01:03:18.502485478 +0000 UTC m=+13.383629185 E0410 01:03:18.514591 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0410 01:03:18.514746 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 01:03:18.514856 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 01:03:18.514981 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0410 01:03:18.522950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:03:18.522999 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-10 01:03:18.522991832 +0000 UTC m=+13.404135469 I0410 01:03:18.523085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:03:18.532270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-579m5" condition "Approved" to 2026-04-10 01:03:18.532257684 +0000 UTC m=+13.413401351 I0410 01:03:18.544011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-579m5" condition "Ready" to 2026-04-10 01:03:18.54399905 +0000 UTC m=+13.425142707 I0410 01:03:18.569085 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:03:18.569070275 +0000 UTC m=+13.450213942 I0410 01:03:18.587722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:03:18.588374 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:03:18.588365571 +0000 UTC m=+13.469509208 I0410 01:03:18.611767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:03:18.612709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:03:23.516046 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:03:23.516032929 +0000 UTC m=+18.397176596 I0410 01:03:45.891963 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-10 01:03:45.891901374 +0000 UTC m=+40.773045021 I0410 01:03:45.892092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:03:45.892262 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 01:03:45.892250462 +0000 UTC m=+40.773394119 I0410 01:03:45.900283 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-10 01:03:45.900267651 +0000 UTC m=+40.781411298 I0410 01:03:45.916664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:03:45.916758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:03:45.916787 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 01:03:45.916780641 +0000 UTC m=+40.797924278 I0410 01:03:46.077780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dw8wp" condition "Approved" to 2026-04-10 01:03:46.077766955 +0000 UTC m=+40.958910622 I0410 01:03:46.113835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dw8wp" condition "Ready" to 2026-04-10 01:03:46.113823707 +0000 UTC m=+40.994967374 I0410 01:03:46.138667 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:03:46.138655047 +0000 UTC m=+41.019798694 I0410 01:03:46.156892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:03:46.211677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:07:43.316182 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-110.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:07:43.316258 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-110.nip.io-tls" condition "Ready" to 2026-04-10 01:07:43.316235404 +0000 UTC m=+278.197379051 I0410 01:07:43.317414 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-110.nip.io-tls" condition "Issuing" to 2026-04-10 01:07:43.316217434 +0000 UTC m=+278.197361121 I0410 01:07:43.336191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-110.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-110.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:07:43.336341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-110.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:07:43.336436 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-110.nip.io-tls" condition "Issuing" to 2026-04-10 01:07:43.336422526 +0000 UTC m=+278.217566243 I0410 01:07:43.491521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-110.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-110.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:07:43.499416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-110.nip.io-tls-lrn4v" condition "Approved" to 2026-04-10 01:07:43.499404237 +0000 UTC m=+278.380547894 I0410 01:07:43.522901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-110.nip.io-tls-lrn4v" condition "Ready" to 2026-04-10 01:07:43.522891371 +0000 UTC m=+278.404034998 I0410 01:07:43.552690 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-110.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:07:43.552677505 +0000 UTC m=+278.433821152 I0410 01:07:43.583160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-110.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-110.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:08:47.018487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:08:47.018515 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 01:08:47.018455862 +0000 UTC m=+341.899599519 I0410 01:08:47.018536 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-10 01:08:47.018529133 +0000 UTC m=+341.899672790 I0410 01:08:47.031615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:08:47.031670 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 01:08:47.031663283 +0000 UTC m=+341.912806930 E0410 01:08:47.033715 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 01:08:47.033765 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-10 01:08:47.0337473 +0000 UTC m=+341.914890957 E0410 01:08:47.033829 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 01:08:47.047422 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0410 01:08:47.047678 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 01:08:47.047704 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 01:08:47.047747 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0410 01:08:47.048314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:08:47.048356 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 01:08:47.048350579 +0000 UTC m=+341.929494216 I0410 01:08:47.059397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8t8v4" condition "Approved" to 2026-04-10 01:08:47.059382441 +0000 UTC m=+341.940526078 I0410 01:08:47.073606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8t8v4" condition "Ready" to 2026-04-10 01:08:47.073593285 +0000 UTC m=+341.954736922 I0410 01:08:47.095184 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:08:47.095176064 +0000 UTC m=+341.976319711 I0410 01:08:47.111361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:08:52.048015 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:08:52.047993287 +0000 UTC m=+346.929136954 I0410 01:09:30.433402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:09:30.433725 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-10 01:09:30.43367873 +0000 UTC m=+385.314822367 I0410 01:09:30.433933 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-10 01:09:30.433923907 +0000 UTC m=+385.315067574 I0410 01:09:30.458869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:09:30.461131 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 01:09:30.461120795 +0000 UTC m=+385.342264462 I0410 01:09:30.473172 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-10 01:09:30.473156874 +0000 UTC m=+385.354300521 I0410 01:09:30.473780 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 01:09:30.473774392 +0000 UTC m=+385.354918039 I0410 01:09:30.474062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:09:30.474086 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-10 01:09:30.474081561 +0000 UTC m=+385.355225208 I0410 01:09:30.514650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:30.514708 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-10 01:09:30.514702869 +0000 UTC m=+385.395846506 I0410 01:09:30.524386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:30.524449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:09:30.524464 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 01:09:30.524460182 +0000 UTC m=+385.405603829 I0410 01:09:30.537571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:30.537631 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 01:09:30.537625843 +0000 UTC m=+385.418769480 I0410 01:09:30.759027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k7n8n" condition "Approved" to 2026-04-10 01:09:30.759017382 +0000 UTC m=+385.640161029 I0410 01:09:30.779364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k7n8n" condition "Ready" to 2026-04-10 01:09:30.779342631 +0000 UTC m=+385.660486268 I0410 01:09:30.817757 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:30.817745984 +0000 UTC m=+385.698889621 I0410 01:09:30.844271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:30.844547 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:30.844542311 +0000 UTC m=+385.725685938 I0410 01:09:30.868981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:30.893599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:30.893848 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:30.893843901 +0000 UTC m=+385.774987538 I0410 01:09:30.927690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:30.960274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n4bjw" condition "Approved" to 2026-04-10 01:09:30.960263606 +0000 UTC m=+385.841407253 I0410 01:09:30.977300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n4bjw" condition "Ready" to 2026-04-10 01:09:30.97728608 +0000 UTC m=+385.858429727 I0410 01:09:31.000546 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:31.000534254 +0000 UTC m=+385.881677911 I0410 01:09:31.005493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:31.066666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:31.231949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f4m4v" condition "Approved" to 2026-04-10 01:09:31.231938374 +0000 UTC m=+386.113082011 I0410 01:09:31.376841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f4m4v" condition "Ready" to 2026-04-10 01:09:31.37682634 +0000 UTC m=+386.257970017 I0410 01:09:31.972401 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:31.972378303 +0000 UTC m=+386.853522050 I0410 01:09:32.068832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:32.069167 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:32.06915825 +0000 UTC m=+386.950301897 I0410 01:09:32.273574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:44.275964 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" condition "Ready" to 2026-04-10 01:09:44.275917735 +0000 UTC m=+399.157061402 I0410 01:09:44.276632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:09:44.276658 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" condition "Issuing" to 2026-04-10 01:09:44.27665209 +0000 UTC m=+399.157795757 I0410 01:09:44.290420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:44.290509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:09:44.290526 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" condition "Issuing" to 2026-04-10 01:09:44.29052023 +0000 UTC m=+399.171663867 I0410 01:09:44.540071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:44.546710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9dw6x-swnqn" condition "Approved" to 2026-04-10 01:09:44.546696074 +0000 UTC m=+399.427839721 I0410 01:09:44.574727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9dw6x-swnqn" condition "Ready" to 2026-04-10 01:09:44.574715783 +0000 UTC m=+399.455859430 I0410 01:09:44.602294 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:44.602282837 +0000 UTC m=+399.483426464 I0410 01:09:44.618731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:44.619078 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:44.619071884 +0000 UTC m=+399.500215531 I0410 01:09:44.640957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9dw6x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:59.626672 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-10 01:09:59.626652163 +0000 UTC m=+414.507795840 I0410 01:09:59.628099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:09:59.628140 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-10 01:09:59.628131818 +0000 UTC m=+414.509275455 I0410 01:09:59.640912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:59.641012 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-10 01:09:59.641006835 +0000 UTC m=+414.522150492 I0410 01:09:59.745479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:59.792668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7s2r4" condition "Approved" to 2026-04-10 01:09:59.792653758 +0000 UTC m=+414.673797415 I0410 01:09:59.815905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7s2r4" condition "Ready" to 2026-04-10 01:09:59.815874701 +0000 UTC m=+414.697018338 I0410 01:09:59.859658 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:59.859644047 +0000 UTC m=+414.740787694 I0410 01:09:59.885972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:59.886191 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:59.886185072 +0000 UTC m=+414.767328709 I0410 01:09:59.891631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:59.899824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:09:59.900020 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:09:59.900015546 +0000 UTC m=+414.781159183 I0410 01:09:59.903434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:13:08.052512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:13:08.053182 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-10 01:13:08.05316186 +0000 UTC m=+602.934305507 I0410 01:13:08.054075 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-10 01:13:08.054061376 +0000 UTC m=+602.935205013 I0410 01:13:08.071803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:13:08.072071 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-10 01:13:08.072061308 +0000 UTC m=+602.953204945 I0410 01:13:08.298071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:13:08.336558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hjnbs" condition "Approved" to 2026-04-10 01:13:08.336544724 +0000 UTC m=+603.217688371 I0410 01:13:08.356633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hjnbs" condition "Ready" to 2026-04-10 01:13:08.356622715 +0000 UTC m=+603.237766352 I0410 01:13:08.385438 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:13:08.385422955 +0000 UTC m=+603.266566592 I0410 01:13:08.415349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:13:49.410456 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-10 01:13:49.410440669 +0000 UTC m=+644.291584316 I0410 01:13:49.410801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:13:49.410817 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-10 01:13:49.410813263 +0000 UTC m=+644.291956900 I0410 01:13:49.427209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:13:49.427251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 01:13:49.427264 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-10 01:13:49.427258882 +0000 UTC m=+644.308402519 I0410 01:13:49.653170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 01:13:49.666842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7hl8t" condition "Approved" to 2026-04-10 01:13:49.666829467 +0000 UTC m=+644.547973104 I0410 01:13:49.690512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7hl8t" condition "Ready" to 2026-04-10 01:13:49.690498857 +0000 UTC m=+644.571642494 I0410 01:13:49.722482 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 01:13:49.722464956 +0000 UTC m=+644.603608613 I0410 01:13:49.747986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"