I0416 06:06:18.178283 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0416 06:06:18.179415 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0416 06:06:18.179860 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0416 06:06:18.183617 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0416 06:06:18.184041 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0416 06:06:18.184151 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0416 06:06:18.184181 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0416 06:06:18.186550 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0416 06:06:18.204834 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0416 06:06:18.209681 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0416 06:06:18.214817 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0416 06:06:18.219939 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0416 06:06:18.222218 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0416 06:06:18.224193 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0416 06:06:18.224221 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0416 06:06:18.226225 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0416 06:06:18.228290 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0416 06:06:18.232137 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0416 06:06:18.232157 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0416 06:06:18.232339 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0416 06:06:18.234524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0416 06:06:18.240205 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0416 06:06:18.240317 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0416 06:06:18.243680 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0416 06:06:18.246083 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0416 06:06:18.246104 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0416 06:06:18.246150 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0416 06:06:18.248414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0416 06:06:18.250518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0416 06:06:18.252890 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0416 06:06:18.255420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0416 06:06:18.257417 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0416 06:06:18.259631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0416 06:06:18.263582 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 06:06:18.266442 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 06:06:18.267067 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 06:06:18.281204 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 06:06:18.304667 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 06:06:18.316353 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 06:06:18.335556 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 06:06:18.350791 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 06:06:18.353559 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 06:06:18.367961 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 06:06:32.170924 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 06:06:32.170903082 +0000 UTC m=+14.032133326 I0416 06:06:33.020021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:06:33.020115 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 06:06:33.020105422 +0000 UTC m=+14.881335666 I0416 06:06:33.020234 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 06:06:33.020069461 +0000 UTC m=+14.881299735 E0416 06:06:33.039143 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 06:06:33.039241 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 06:06:33.039230608 +0000 UTC m=+14.900460842 E0416 06:06:33.039279 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 06:06:33.041681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:06:33.041749 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 06:06:33.041742477 +0000 UTC m=+14.902972721 E0416 06:06:33.051732 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0416 06:06:33.053523 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 06:06:33.053611 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 06:06:33.053679 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0416 06:06:33.062026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:06:33.062212 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 06:06:33.062198834 +0000 UTC m=+14.923429098 I0416 06:06:33.069339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vvwzw" condition "Approved" to 2026-04-16 06:06:33.069330234 +0000 UTC m=+14.930560478 I0416 06:06:33.080915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vvwzw" condition "Ready" to 2026-04-16 06:06:33.080902083 +0000 UTC m=+14.942132317 I0416 06:06:33.102238 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:06:33.102222433 +0000 UTC m=+14.963452697 I0416 06:06:33.120624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:06:33.121316 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:06:33.121305458 +0000 UTC m=+14.982535702 I0416 06:06:33.126887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:06:33.136599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:06:38.054789 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:06:38.054773787 +0000 UTC m=+19.916004031 I0416 06:07:05.892876 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:07:05.893376 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 06:07:05.892964939 +0000 UTC m=+47.754195183 I0416 06:07:05.893578 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 06:07:05.892569281 +0000 UTC m=+47.753799505 I0416 06:07:05.912028 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 06:07:05.91201792 +0000 UTC m=+47.773248164 I0416 06:07:05.936082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:07:05.936278 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 06:07:05.936266395 +0000 UTC m=+47.797496619 I0416 06:07:06.292073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:07:06.333663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qwcbz" condition "Approved" to 2026-04-16 06:07:06.333649019 +0000 UTC m=+48.194879243 I0416 06:07:06.370061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qwcbz" condition "Ready" to 2026-04-16 06:07:06.370048811 +0000 UTC m=+48.231279045 I0416 06:07:06.400571 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:07:06.400554506 +0000 UTC m=+48.261784750 I0416 06:07:06.422915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:07:06.479898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:12:36.570998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:12:36.571081 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-04-16 06:12:36.571032107 +0000 UTC m=+378.432262351 I0416 06:12:36.571715 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-04-16 06:12:36.5717028 +0000 UTC m=+378.432933074 I0416 06:12:36.638799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:12:36.638859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:12:36.638913 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-04-16 06:12:36.638870738 +0000 UTC m=+378.500100992 I0416 06:12:37.096405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:12:37.123013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-rpd9p" condition "Approved" to 2026-04-16 06:12:37.122999631 +0000 UTC m=+378.984229905 I0416 06:12:37.160615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-rpd9p" condition "Ready" to 2026-04-16 06:12:37.160601025 +0000 UTC m=+379.021831289 I0416 06:12:37.214989 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:12:37.214974795 +0000 UTC m=+379.076205029 I0416 06:12:37.269274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:13:57.894153 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 06:13:57.894117745 +0000 UTC m=+459.755348009 I0416 06:13:57.894219 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:13:57.894257 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 06:13:57.894249108 +0000 UTC m=+459.755479352 I0416 06:13:57.909462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:13:57.909582 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 06:13:57.90957274 +0000 UTC m=+459.770802984 E0416 06:13:57.911177 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 06:13:57.911206 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-16 06:13:57.911200991 +0000 UTC m=+459.772431235 E0416 06:13:57.911244 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 06:13:57.929425 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0416 06:13:57.929547 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 06:13:57.929663 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 06:13:57.929824 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0416 06:13:57.932137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:13:57.952140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bgljm" condition "Approved" to 2026-04-16 06:13:57.95212692 +0000 UTC m=+459.813357164 I0416 06:13:57.964794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bgljm" condition "Ready" to 2026-04-16 06:13:57.964785041 +0000 UTC m=+459.826015285 I0416 06:13:57.988455 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:13:57.988444181 +0000 UTC m=+459.849674425 I0416 06:13:58.004177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:13:58.044836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:02.930771 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:14:02.930755193 +0000 UTC m=+464.791985467 I0416 06:14:43.259575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:14:43.259651 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 06:14:43.259612554 +0000 UTC m=+505.120842778 I0416 06:14:43.260507 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 06:14:43.260502411 +0000 UTC m=+505.121732645 I0416 06:14:43.260696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:14:43.260711 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 06:14:43.260709045 +0000 UTC m=+505.121939279 I0416 06:14:43.260904 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 06:14:43.260900098 +0000 UTC m=+505.122130322 I0416 06:14:43.261130 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:14:43.261145 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 06:14:43.261142333 +0000 UTC m=+505.122372567 I0416 06:14:43.263200 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 06:14:43.263195881 +0000 UTC m=+505.124426105 I0416 06:14:43.314200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:43.314258 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 06:14:43.314252825 +0000 UTC m=+505.175483059 I0416 06:14:43.314547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:43.314587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:14:43.314603 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 06:14:43.314599942 +0000 UTC m=+505.175830176 I0416 06:14:43.314714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:43.314836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:14:43.314865 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 06:14:43.314858667 +0000 UTC m=+505.176088921 I0416 06:14:43.665069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:43.720735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qdjxw" condition "Approved" to 2026-04-16 06:14:43.720724891 +0000 UTC m=+505.581955135 I0416 06:14:43.747084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qdjxw" condition "Ready" to 2026-04-16 06:14:43.747071723 +0000 UTC m=+505.608301977 I0416 06:14:43.783656 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:14:43.783645986 +0000 UTC m=+505.644876210 I0416 06:14:43.811764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:43.812127 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:14:43.812121109 +0000 UTC m=+505.673351343 I0416 06:14:43.821355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zfg89" condition "Approved" to 2026-04-16 06:14:43.821330621 +0000 UTC m=+505.682560875 I0416 06:14:43.847173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:43.848706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zfg89" condition "Ready" to 2026-04-16 06:14:43.848692972 +0000 UTC m=+505.709923226 I0416 06:14:43.851092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:43.853309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-92jcv" condition "Approved" to 2026-04-16 06:14:43.853300028 +0000 UTC m=+505.714530262 I0416 06:14:44.093249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-92jcv" condition "Ready" to 2026-04-16 06:14:44.093238361 +0000 UTC m=+505.954468595 I0416 06:14:44.181855 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:14:44.181841966 +0000 UTC m=+506.043072200 I0416 06:14:44.439737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:44.486649 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:14:44.48663442 +0000 UTC m=+506.347864654 I0416 06:14:44.633730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:44.634301 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:14:44.634292138 +0000 UTC m=+506.495522382 I0416 06:14:44.982382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:53.611121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:14:53.611177 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" condition "Issuing" to 2026-04-16 06:14:53.611150323 +0000 UTC m=+515.472380577 I0416 06:14:53.611498 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" condition "Ready" to 2026-04-16 06:14:53.611480879 +0000 UTC m=+515.472711123 I0416 06:14:53.628346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:53.628432 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" condition "Ready" to 2026-04-16 06:14:53.628421995 +0000 UTC m=+515.489652269 I0416 06:14:53.765913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:53.797808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vtkx4-p5q9j" condition "Approved" to 2026-04-16 06:14:53.797792699 +0000 UTC m=+515.659022933 I0416 06:14:53.820982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vtkx4-p5q9j" condition "Ready" to 2026-04-16 06:14:53.820954061 +0000 UTC m=+515.682184305 I0416 06:14:53.851774 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:14:53.851758225 +0000 UTC m=+515.712988469 I0416 06:14:53.875593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:53.875781 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:14:53.875775902 +0000 UTC m=+515.737006136 I0416 06:14:53.892860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:14:53.893145 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:14:53.893138615 +0000 UTC m=+515.754368849 I0416 06:14:53.899757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vtkx4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:15:10.872524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:15:10.872569 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 06:15:10.872559132 +0000 UTC m=+532.733789366 I0416 06:15:10.872956 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 06:15:10.872928649 +0000 UTC m=+532.734158893 I0416 06:15:10.895282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:15:10.895361 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 06:15:10.895352145 +0000 UTC m=+532.756582389 I0416 06:15:11.310993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:15:11.348850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sxgk4" condition "Approved" to 2026-04-16 06:15:11.348830606 +0000 UTC m=+533.210060850 I0416 06:15:11.372097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sxgk4" condition "Ready" to 2026-04-16 06:15:11.372087807 +0000 UTC m=+533.233318041 I0416 06:15:11.403725 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:15:11.403704903 +0000 UTC m=+533.264935147 I0416 06:15:11.423235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:18:33.430001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:18:33.430239 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 06:18:33.430064075 +0000 UTC m=+735.291294319 I0416 06:18:33.430521 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 06:18:33.430507921 +0000 UTC m=+735.291738165 I0416 06:18:33.447960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:18:33.448079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:18:33.448101 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 06:18:33.448095405 +0000 UTC m=+735.309325639 I0416 06:18:33.607261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-drmn6" condition "Approved" to 2026-04-16 06:18:33.607252239 +0000 UTC m=+735.468482473 I0416 06:18:33.625064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-drmn6" condition "Ready" to 2026-04-16 06:18:33.62505447 +0000 UTC m=+735.486284714 I0416 06:18:33.661346 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:18:33.661332446 +0000 UTC m=+735.522562690 I0416 06:18:33.685078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:18:33.685625 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:18:33.685619088 +0000 UTC m=+735.546849322 I0416 06:18:33.700994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:18:33.701248 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:18:33.701243092 +0000 UTC m=+735.562473326 I0416 06:19:19.678262 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 06:19:19.678242188 +0000 UTC m=+781.539472442 I0416 06:19:19.679115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:19:19.679153 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-16 06:19:19.679146188 +0000 UTC m=+781.540376422 I0416 06:19:19.694469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:19:19.694547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 06:19:19.694563 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-16 06:19:19.694557339 +0000 UTC m=+781.555787573 I0416 06:19:19.820319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-nnjw7" condition "Approved" to 2026-04-16 06:19:19.820301277 +0000 UTC m=+781.681531531 I0416 06:19:19.838320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-nnjw7" condition "Ready" to 2026-04-16 06:19:19.838309743 +0000 UTC m=+781.699539987 I0416 06:19:19.872744 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:19:19.872734345 +0000 UTC m=+781.733964579 I0416 06:19:19.896914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:19:19.897508 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:19:19.897502085 +0000 UTC m=+781.758732319 I0416 06:19:19.914893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 06:19:19.915127 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 06:19:19.915122059 +0000 UTC m=+781.776352293