I0427 01:25:06.133505 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 01:25:06.133639 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 01:25:06.133741 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 01:25:06.137931 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 01:25:06.138391 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 01:25:06.138416 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 01:25:06.138448 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 01:25:06.141213 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 01:25:06.216997 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 01:25:06.225271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 01:25:06.228762 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 01:25:06.231013 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 01:25:06.233218 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 01:25:06.233296 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 01:25:06.235058 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 01:25:06.235135 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 01:25:06.237197 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 01:25:06.238946 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 01:25:06.245314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 01:25:06.249731 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 01:25:06.249866 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 01:25:06.253467 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 01:25:06.256197 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 01:25:06.258245 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 01:25:06.258272 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 01:25:06.258404 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 01:25:06.260758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 01:25:06.262644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 01:25:06.264843 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 01:25:06.270496 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 01:25:06.275034 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 01:25:06.277954 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 01:25:06.278008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 01:25:06.281102 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:25:06.281435 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:25:06.281866 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:25:06.282144 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:25:06.282508 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:25:06.282721 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:25:06.283268 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:25:06.283860 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:25:06.284337 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:25:06.375393 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 01:25:26.471449 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 01:25:26.471425113 +0000 UTC m=+20.382478751 I0427 01:25:27.273982 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 01:25:27.273966619 +0000 UTC m=+21.185020287 I0427 01:25:27.273911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:25:27.274305 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 01:25:27.274296172 +0000 UTC m=+21.185349810 E0427 01:25:27.290727 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:25:27.290864 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 01:25:27.290855675 +0000 UTC m=+21.201909323 E0427 01:25:27.290927 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:25:27.294271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:25:27.294414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:25:27.294437 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 01:25:27.294429463 +0000 UTC m=+21.205483091 E0427 01:25:27.305391 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 01:25:27.305670 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:25:27.305844 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:25:27.305990 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 01:25:27.338780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wlb98" condition "Approved" to 2026-04-27 01:25:27.338764525 +0000 UTC m=+21.249818193 I0427 01:25:27.351468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wlb98" condition "Ready" to 2026-04-27 01:25:27.351452487 +0000 UTC m=+21.262506125 I0427 01:25:27.375895 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:25:27.375878156 +0000 UTC m=+21.286931794 I0427 01:25:27.396908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:25:27.399742 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:25:27.399734302 +0000 UTC m=+21.310787930 I0427 01:25:27.404632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:25:27.421495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:25:27.421939 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:25:27.421925214 +0000 UTC m=+21.332978852 I0427 01:25:32.305996 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:25:32.305982407 +0000 UTC m=+26.217036075 I0427 01:25:58.737236 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 01:25:58.737179025 +0000 UTC m=+52.648232663 I0427 01:25:58.737846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:25:58.737868 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 01:25:58.737863885 +0000 UTC m=+52.648917523 I0427 01:25:58.751059 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 01:25:58.751043816 +0000 UTC m=+52.662097464 I0427 01:25:58.758702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:25:58.758754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:25:58.758771 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 01:25:58.758766792 +0000 UTC m=+52.669820420 I0427 01:25:58.941783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:25:58.948739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k2cf4" condition "Approved" to 2026-04-27 01:25:58.948722355 +0000 UTC m=+52.859775993 I0427 01:25:58.986241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k2cf4" condition "Ready" to 2026-04-27 01:25:58.986224216 +0000 UTC m=+52.897277874 I0427 01:25:59.015740 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:25:59.0157291 +0000 UTC m=+52.926782738 I0427 01:25:59.039872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:25:59.040191 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:25:59.04018368 +0000 UTC m=+52.951237318 I0427 01:25:59.053924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:25:59.065874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:25:59.065937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:25:59.066533 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:25:59.066521354 +0000 UTC m=+52.977575012 I0427 01:30:35.434286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:30:35.436472 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Issuing" to 2026-04-27 01:30:35.434863692 +0000 UTC m=+329.345917340 I0427 01:30:35.436512 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready" to 2026-04-27 01:30:35.433802366 +0000 UTC m=+329.344856034 I0427 01:30:35.617089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:35.617199 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready" to 2026-04-27 01:30:35.61718985 +0000 UTC m=+329.528243478 I0427 01:30:36.041847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:36.255220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-8m4bm" condition "Approved" to 2026-04-27 01:30:36.255198586 +0000 UTC m=+330.166252254 I0427 01:30:36.501781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-8m4bm" condition "Ready" to 2026-04-27 01:30:36.501768923 +0000 UTC m=+330.412822551 I0427 01:30:36.832461 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:30:36.832451057 +0000 UTC m=+330.743504695 I0427 01:30:36.932140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:30:37.174084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:31:44.003472 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:31:44.003595 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 01:31:44.002900594 +0000 UTC m=+397.913954282 I0427 01:31:44.003651 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 01:31:44.003633184 +0000 UTC m=+397.914686852 E0427 01:31:44.506587 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:31:44.506660 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 01:31:44.506653815 +0000 UTC m=+398.417707443 E0427 01:31:44.506684 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:31:44.510076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:31:44.510272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:31:44.510336 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 01:31:44.510324993 +0000 UTC m=+398.421378621 E0427 01:31:44.803209 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0427 01:31:44.804919 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:31:44.804998 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:31:44.805512 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 01:31:45.219350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:31:45.220076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nmwdv" condition "Approved" to 2026-04-27 01:31:45.220066678 +0000 UTC m=+399.131120346 I0427 01:31:45.314754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nmwdv" condition "Ready" to 2026-04-27 01:31:45.314738203 +0000 UTC m=+399.225791871 I0427 01:31:45.485056 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:31:45.485000426 +0000 UTC m=+399.396054064 I0427 01:31:45.555367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:31:45.555753 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:31:45.555746348 +0000 UTC m=+399.466799976 I0427 01:31:45.798080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:31:49.804076 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:31:49.804063819 +0000 UTC m=+403.715117467 I0427 01:32:41.234262 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 01:32:41.234231894 +0000 UTC m=+455.145285512 I0427 01:32:41.248019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:41.248057 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 01:32:41.248050363 +0000 UTC m=+455.159104011 I0427 01:32:41.249163 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 01:32:41.24915801 +0000 UTC m=+455.160211638 I0427 01:32:41.249564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:41.249579 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 01:32:41.249576129 +0000 UTC m=+455.160629757 I0427 01:32:41.249855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:41.249888 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 01:32:41.249885562 +0000 UTC m=+455.160939190 I0427 01:32:41.249718 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 01:32:41.249709104 +0000 UTC m=+455.160762732 I0427 01:32:41.298269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:41.298331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:41.298345 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 01:32:41.298338291 +0000 UTC m=+455.209391929 I0427 01:32:41.298432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:41.298465 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 01:32:41.298456136 +0000 UTC m=+455.209509804 I0427 01:32:41.304381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:41.304467 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 01:32:41.304458346 +0000 UTC m=+455.215512014 I0427 01:32:41.399926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:41.449834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dmfhf" condition "Approved" to 2026-04-27 01:32:41.449819474 +0000 UTC m=+455.360873142 I0427 01:32:41.470030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dmfhf" condition "Ready" to 2026-04-27 01:32:41.470019339 +0000 UTC m=+455.381072977 I0427 01:32:41.507068 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:41.507060614 +0000 UTC m=+455.418114242 I0427 01:32:41.530941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:41.551112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:41.603059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9gnfc" condition "Approved" to 2026-04-27 01:32:41.603047952 +0000 UTC m=+455.514101580 E0427 01:32:41.606652 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-rc6gs\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0427 01:32:41.623223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9gnfc" condition "Ready" to 2026-04-27 01:32:41.623215305 +0000 UTC m=+455.534268933 I0427 01:32:41.655225 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:41.655212491 +0000 UTC m=+455.566266139 I0427 01:32:41.709670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:41.710172 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:41.710159052 +0000 UTC m=+455.621212720 I0427 01:32:41.972410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:42.200879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mv94k" condition "Approved" to 2026-04-27 01:32:42.200868509 +0000 UTC m=+456.111922147 I0427 01:32:42.343378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mv94k" condition "Ready" to 2026-04-27 01:32:42.343367658 +0000 UTC m=+456.254421286 I0427 01:32:42.734053 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:42.73404157 +0000 UTC m=+456.645095198 I0427 01:32:42.807231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:42.807657 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:42.807650902 +0000 UTC m=+456.718704540 I0427 01:32:43.007622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:52.655222 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:52.655272 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls" condition "Issuing" to 2026-04-27 01:32:52.655251464 +0000 UTC m=+466.566305122 I0427 01:32:52.655298 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls" condition "Ready" to 2026-04-27 01:32:52.655277315 +0000 UTC m=+466.566330973 I0427 01:32:53.523137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:53.523236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:32:53.523331 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls" condition "Issuing" to 2026-04-27 01:32:53.523319773 +0000 UTC m=+467.434373431 I0427 01:32:55.141054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hwwwd-g82l6" condition "Approved" to 2026-04-27 01:32:55.14104014 +0000 UTC m=+469.052093788 I0427 01:32:55.141719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:55.668837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hwwwd-g82l6" condition "Ready" to 2026-04-27 01:32:55.668820724 +0000 UTC m=+469.579874382 I0427 01:32:56.071819 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:32:56.071810544 +0000 UTC m=+469.982864172 I0427 01:32:56.088027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:32:56.238958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hwwwd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:17.230414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:33:17.230688 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 01:33:17.230668832 +0000 UTC m=+491.141722470 I0427 01:33:17.230871 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 01:33:17.230827589 +0000 UTC m=+491.141881227 I0427 01:33:17.255500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:17.255775 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 01:33:17.255761253 +0000 UTC m=+491.166814931 I0427 01:33:17.648271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:17.693658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rzs48" condition "Approved" to 2026-04-27 01:33:17.693643681 +0000 UTC m=+491.604697319 I0427 01:33:17.750311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rzs48" condition "Ready" to 2026-04-27 01:33:17.750293832 +0000 UTC m=+491.661347490 I0427 01:33:17.857880 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:33:17.857867847 +0000 UTC m=+491.768921475 I0427 01:33:17.903765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:36:48.674183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:36:48.674268 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 01:36:48.674252631 +0000 UTC m=+702.585306299 I0427 01:36:48.674270 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 01:36:48.67423286 +0000 UTC m=+702.585286498 I0427 01:36:48.697649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:36:48.697748 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 01:36:48.697737162 +0000 UTC m=+702.608790830 I0427 01:36:48.777705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:36:48.852662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wmgl9" condition "Approved" to 2026-04-27 01:36:48.852649716 +0000 UTC m=+702.763703354 I0427 01:36:48.887410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wmgl9" condition "Ready" to 2026-04-27 01:36:48.887398731 +0000 UTC m=+702.798452369 I0427 01:36:49.000870 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:36:49.000854901 +0000 UTC m=+702.911908559 I0427 01:36:49.055997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:36:49.260248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:31.022468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:37:31.022502 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 01:37:31.022490562 +0000 UTC m=+744.933544210 I0427 01:37:31.022831 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 01:37:31.022825926 +0000 UTC m=+744.933879574 I0427 01:37:31.037833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:31.037921 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 01:37:31.037914153 +0000 UTC m=+744.948967781 I0427 01:37:31.216704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:31.269303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-r5xv7" condition "Approved" to 2026-04-27 01:37:31.269292656 +0000 UTC m=+745.180346294 I0427 01:37:31.290893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-r5xv7" condition "Ready" to 2026-04-27 01:37:31.290885027 +0000 UTC m=+745.201938645 I0427 01:37:31.321853 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:37:31.321835171 +0000 UTC m=+745.232888809 I0427 01:37:31.347263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:31.347800 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:37:31.347788788 +0000 UTC m=+745.258842436 I0427 01:37:31.368647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:31.369019 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:37:31.369010555 +0000 UTC m=+745.280064183