I0428 13:48:27.516801 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 13:48:27.519584 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 13:48:27.520123 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 13:48:27.528265 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 13:48:27.529106 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 13:48:27.529208 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 13:48:27.529369 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 13:48:27.533753 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 13:48:27.548102 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 13:48:27.552808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 13:48:27.557110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 13:48:27.561514 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 13:48:27.565542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 13:48:27.568421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 13:48:27.570658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 13:48:27.572374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 13:48:27.574048 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 13:48:27.574075 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 13:48:27.574084 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 13:48:27.574092 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 13:48:27.574171 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 13:48:27.575990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 13:48:27.580537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 13:48:27.583357 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 13:48:27.583423 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 13:48:27.586170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 13:48:27.588750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 13:48:27.590631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 13:48:27.592837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 13:48:27.594801 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 13:48:27.596602 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 13:48:27.596664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 13:48:27.598831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 13:48:27.605942 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:27.605942 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:27.606338 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:27.622166 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:27.640982 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:27.662361 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:27.677319 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:27.694975 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:27.698641 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:27.715585 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 13:48:39.783625 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 13:48:39.783609413 +0000 UTC m=+12.305470397 I0428 13:48:40.572720 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 13:48:40.572706886 +0000 UTC m=+13.094567870 I0428 13:48:40.573080 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:48:40.573202 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 13:48:40.573161542 +0000 UTC m=+13.095022566 E0428 13:48:40.589916 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:48:40.589982 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 13:48:40.589975478 +0000 UTC m=+13.111836442 E0428 13:48:40.590005 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:48:40.593927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:48:40.593984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:48:40.594129 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 13:48:40.594122573 +0000 UTC m=+13.115983547 E0428 13:48:40.602756 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 13:48:40.602847 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:48:40.602874 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:48:40.602906 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 13:48:40.631596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:48:40.632685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-htmbm" condition "Approved" to 2026-04-28 13:48:40.632676497 +0000 UTC m=+13.154537461 I0428 13:48:40.643970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-htmbm" condition "Ready" to 2026-04-28 13:48:40.643959551 +0000 UTC m=+13.165820525 I0428 13:48:40.670177 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:48:40.670165904 +0000 UTC m=+13.192026868 I0428 13:48:40.688444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:48:40.688884 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:48:40.688874926 +0000 UTC m=+13.210735890 I0428 13:48:40.701555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:48:40.702321 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:48:40.702304954 +0000 UTC m=+13.224165918 I0428 13:48:45.603838 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:48:45.603824562 +0000 UTC m=+18.125685526 I0428 13:49:10.820004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:49:10.820072 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 13:49:10.820065643 +0000 UTC m=+43.341926607 I0428 13:49:10.820410 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 13:49:10.820405622 +0000 UTC m=+43.342266586 I0428 13:49:10.842444 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 13:49:10.842430685 +0000 UTC m=+43.364291649 I0428 13:49:10.860906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:49:10.861005 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 13:49:10.860998303 +0000 UTC m=+43.382859257 I0428 13:49:11.019740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:49:11.050996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4mr25" condition "Approved" to 2026-04-28 13:49:11.050984999 +0000 UTC m=+43.572845963 I0428 13:49:11.080204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4mr25" condition "Ready" to 2026-04-28 13:49:11.080191527 +0000 UTC m=+43.602052491 I0428 13:49:11.112535 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:49:11.112516562 +0000 UTC m=+43.634377526 I0428 13:49:11.138280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:53.044697 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-192.nip.io-tls" condition "Ready" to 2026-04-28 13:53:53.044681473 +0000 UTC m=+325.566542437 I0428 13:53:53.044858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-192.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:53:53.044917 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-192.nip.io-tls" condition "Issuing" to 2026-04-28 13:53:53.044911739 +0000 UTC m=+325.566772693 I0428 13:53:53.060941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-192.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-192.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:53.061008 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-192.nip.io-tls" condition "Ready" to 2026-04-28 13:53:53.061002916 +0000 UTC m=+325.582863860 I0428 13:53:53.239065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-192.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-192.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:53.272120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-192.nip.io-tls-7hj24" condition "Approved" to 2026-04-28 13:53:53.272101994 +0000 UTC m=+325.793962988 I0428 13:53:53.295350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-192.nip.io-tls-7hj24" condition "Ready" to 2026-04-28 13:53:53.295337639 +0000 UTC m=+325.817198603 I0428 13:53:53.319694 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-192.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:53:53.319681301 +0000 UTC m=+325.841542295 I0428 13:53:53.342400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-192.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-192.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:53.342693 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-192.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:53:53.34268602 +0000 UTC m=+325.864546984 I0428 13:53:53.344419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-192.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-192.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:53.358694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-192.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-192.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:53:53.359005 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-192.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:53:53.358996133 +0000 UTC m=+325.880857097 I0428 13:54:57.639009 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:57.639075 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 13:54:57.639058417 +0000 UTC m=+390.160919491 I0428 13:54:57.639200 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 13:54:57.639185709 +0000 UTC m=+390.161046723 E0428 13:54:57.649760 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:54:57.649863 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 13:54:57.649855186 +0000 UTC m=+390.171716150 E0428 13:54:57.649902 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 13:54:57.651368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:57.651454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:54:57.651490 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 13:54:57.651485322 +0000 UTC m=+390.173346286 E0428 13:54:57.660793 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 13:54:57.661222 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:54:57.661286 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 13:54:57.661367 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 13:54:57.696163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:54:57.696873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8ph5v" condition "Approved" to 2026-04-28 13:54:57.696855271 +0000 UTC m=+390.218716255 I0428 13:54:57.711550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8ph5v" condition "Ready" to 2026-04-28 13:54:57.711537087 +0000 UTC m=+390.233398061 I0428 13:54:57.732594 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:54:57.732577984 +0000 UTC m=+390.254438978 I0428 13:54:57.755312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:02.662202 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:02.662184763 +0000 UTC m=+395.184045757 I0428 13:55:43.699851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:43.699883 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 13:55:43.699876985 +0000 UTC m=+436.221737949 I0428 13:55:43.702520 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 13:55:43.70250951 +0000 UTC m=+436.224370464 I0428 13:55:43.703110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:43.703134 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:43.710163 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 13:55:43.710156462 +0000 UTC m=+436.232017416 I0428 13:55:43.703151 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 13:55:43.703146194 +0000 UTC m=+436.225007138 I0428 13:55:43.703264 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 13:55:43.703262376 +0000 UTC m=+436.225123330 I0428 13:55:43.709099 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 13:55:43.7090897 +0000 UTC m=+436.230950654 I0428 13:55:43.749471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:43.749568 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 13:55:43.749556951 +0000 UTC m=+436.271417935 I0428 13:55:43.750109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:43.750225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:43.750275 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 13:55:43.750269566 +0000 UTC m=+436.272130520 I0428 13:55:43.757574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:43.761470 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 13:55:43.761442962 +0000 UTC m=+436.283303936 I0428 13:55:43.819718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:43.860414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kcztc" condition "Approved" to 2026-04-28 13:55:43.860396585 +0000 UTC m=+436.382257579 I0428 13:55:43.878532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kcztc" condition "Ready" to 2026-04-28 13:55:43.878520626 +0000 UTC m=+436.400381590 I0428 13:55:43.911401 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:43.911388628 +0000 UTC m=+436.433249592 I0428 13:55:43.936831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:43.997288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:44.025391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:44.036492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-75bvr" condition "Approved" to 2026-04-28 13:55:44.036476621 +0000 UTC m=+436.558337585 I0428 13:55:44.070846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-75bvr" condition "Ready" to 2026-04-28 13:55:44.070834644 +0000 UTC m=+436.592695608 I0428 13:55:44.074034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zqz2f" condition "Approved" to 2026-04-28 13:55:44.07402528 +0000 UTC m=+436.595886234 I0428 13:55:44.265934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zqz2f" condition "Ready" to 2026-04-28 13:55:44.265918706 +0000 UTC m=+436.787779690 I0428 13:55:44.553190 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:44.553180717 +0000 UTC m=+437.075041671 I0428 13:55:44.809782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:44.906061 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:44.906046779 +0000 UTC m=+437.427907743 I0428 13:55:45.091113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:45.091609 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:45.09160062 +0000 UTC m=+437.613461594 I0428 13:55:45.358088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:52.327308 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kngmd-tls" condition "Ready" to 2026-04-28 13:55:52.327114041 +0000 UTC m=+444.848975025 I0428 13:55:52.329185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kngmd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:55:52.329293 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kngmd-tls" condition "Issuing" to 2026-04-28 13:55:52.329235785 +0000 UTC m=+444.851096749 I0428 13:55:52.347588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kngmd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kngmd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:52.347711 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kngmd-tls" condition "Ready" to 2026-04-28 13:55:52.347699291 +0000 UTC m=+444.869560265 I0428 13:55:52.603158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kngmd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kngmd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:52.682728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kngmd-m99lc" condition "Approved" to 2026-04-28 13:55:52.682712833 +0000 UTC m=+445.204573797 I0428 13:55:52.710440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kngmd-m99lc" condition "Ready" to 2026-04-28 13:55:52.710361839 +0000 UTC m=+445.232222803 I0428 13:55:52.755341 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kngmd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:55:52.755320438 +0000 UTC m=+445.277181412 I0428 13:55:52.778589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kngmd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kngmd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:55:52.838321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kngmd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kngmd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:56:08.402097 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 13:56:08.402078932 +0000 UTC m=+460.923939926 I0428 13:56:08.403947 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:56:08.403995 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 13:56:08.40398475 +0000 UTC m=+460.925845734 I0428 13:56:08.435140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:56:08.436936 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 13:56:08.436918578 +0000 UTC m=+460.958779562 I0428 13:56:08.665600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:56:08.714526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8j5tv" condition "Approved" to 2026-04-28 13:56:08.714453048 +0000 UTC m=+461.236314022 I0428 13:56:08.736145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8j5tv" condition "Ready" to 2026-04-28 13:56:08.736133475 +0000 UTC m=+461.257994439 I0428 13:56:08.945165 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:56:08.945149506 +0000 UTC m=+461.467010460 I0428 13:56:08.967392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:56:08.968029 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:56:08.968017316 +0000 UTC m=+461.489878280 I0428 13:56:08.991085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:56:08.995076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:59:32.990232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:59:32.990306 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 13:59:32.990289089 +0000 UTC m=+665.512150053 I0428 13:59:32.990322 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 13:59:32.9903102 +0000 UTC m=+665.512171194 I0428 13:59:33.010661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 13:59:33.010761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 13:59:33.010789 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 13:59:33.010781455 +0000 UTC m=+665.532642419 I0428 13:59:33.210192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-77flk" condition "Approved" to 2026-04-28 13:59:33.210178127 +0000 UTC m=+665.732039081 I0428 13:59:33.238281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-77flk" condition "Ready" to 2026-04-28 13:59:33.238269146 +0000 UTC m=+665.760130100 I0428 13:59:33.273675 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 13:59:33.273665302 +0000 UTC m=+665.795526266 I0428 13:59:33.301187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:01:03.515937 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 14:01:03.515922119 +0000 UTC m=+756.037783083 I0428 14:01:03.516586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:01:03.516677 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 14:01:03.516666674 +0000 UTC m=+756.038527658 I0428 14:01:03.534603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:01:03.534665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 14:01:03.534681 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 14:01:03.534674895 +0000 UTC m=+756.056535859 I0428 14:01:03.683656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wtdwd" condition "Approved" to 2026-04-28 14:01:03.683640419 +0000 UTC m=+756.205501413 I0428 14:01:03.711145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wtdwd" condition "Ready" to 2026-04-28 14:01:03.711130699 +0000 UTC m=+756.232991663 I0428 14:01:03.748369 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:01:03.74835748 +0000 UTC m=+756.270218464 I0428 14:01:03.787507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 14:01:03.788026 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 14:01:03.788016933 +0000 UTC m=+756.309877897 I0428 14:01:03.814306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"