I0428 03:17:44.887022 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 03:17:44.887392 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 03:17:44.887619 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 03:17:44.894035 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 03:17:44.894593 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 03:17:44.894654 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 03:17:44.894691 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 03:17:44.898701 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 03:17:44.914713 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 03:17:44.919349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 03:17:44.923075 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 03:17:44.925217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 03:17:44.930378 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 03:17:44.932785 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 03:17:44.932842 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 03:17:44.935307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 03:17:44.937698 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 03:17:44.940518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 03:17:44.942959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 03:17:44.944480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 03:17:44.950281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 03:17:44.954178 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 03:17:44.954328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 03:17:44.958352 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 03:17:44.960347 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 03:17:44.962121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 03:17:44.963819 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 03:17:44.963833 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 03:17:44.963841 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 03:17:44.963904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 03:17:44.966526 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 03:17:44.968133 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 03:17:44.968440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 03:17:44.975349 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:17:44.975903 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:17:44.976447 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:17:44.987816 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:17:45.010207 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:17:45.018033 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:17:45.032923 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:17:45.051367 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:17:45.059334 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:17:45.070216 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:17:58.665841 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 03:17:58.665830582 +0000 UTC m=+13.813432006 I0428 03:17:59.314956 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:17:59.314986 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 03:17:59.31497876 +0000 UTC m=+14.462580174 I0428 03:17:59.315586 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 03:17:59.31557231 +0000 UTC m=+14.463173734 I0428 03:17:59.332621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:17:59.332726 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 03:17:59.332719345 +0000 UTC m=+14.480320759 E0428 03:17:59.333637 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:17:59.333662 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 03:17:59.333658617 +0000 UTC m=+14.481260031 E0428 03:17:59.333714 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:17:59.346717 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 03:17:59.346899 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:17:59.346977 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:17:59.347164 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 03:17:59.359824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:17:59.397540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l2sts" condition "Approved" to 2026-04-28 03:17:59.397525096 +0000 UTC m=+14.545126550 I0428 03:17:59.438756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l2sts" condition "Ready" to 2026-04-28 03:17:59.438744723 +0000 UTC m=+14.586346147 I0428 03:17:59.497137 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:17:59.497127636 +0000 UTC m=+14.644729060 I0428 03:17:59.519459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:17:59.581840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:04.347883 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:04.347864948 +0000 UTC m=+19.495466402 I0428 03:18:28.747204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:18:28.747260 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 03:18:28.747254667 +0000 UTC m=+43.894856081 I0428 03:18:28.747666 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 03:18:28.747659877 +0000 UTC m=+43.895261291 I0428 03:18:28.788361 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 03:18:28.788337964 +0000 UTC m=+43.935939408 I0428 03:18:28.797179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:28.797343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:18:28.797412 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 03:18:28.79740541 +0000 UTC m=+43.945006824 I0428 03:18:29.194250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:29.204643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9lxqz" condition "Approved" to 2026-04-28 03:18:29.204629651 +0000 UTC m=+44.352231085 I0428 03:18:29.243284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9lxqz" condition "Ready" to 2026-04-28 03:18:29.243273146 +0000 UTC m=+44.390874560 I0428 03:18:29.338315 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:29.338298936 +0000 UTC m=+44.485900360 I0428 03:18:29.367324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:23:45.045351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-53.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:23:45.045400 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Issuing" to 2026-04-28 03:23:45.045390799 +0000 UTC m=+360.192992223 I0428 03:23:45.046119 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Ready" to 2026-04-28 03:23:45.046111055 +0000 UTC m=+360.193712479 I0428 03:23:45.063743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-53.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-53.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:23:45.063951 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-53.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:23:45.064010 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Issuing" to 2026-04-28 03:23:45.063999112 +0000 UTC m=+360.211600536 I0428 03:23:45.275224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-53.nip.io-tls-xl8z8" condition "Approved" to 2026-04-28 03:23:45.275210278 +0000 UTC m=+360.422811702 I0428 03:23:45.304606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-53.nip.io-tls-xl8z8" condition "Ready" to 2026-04-28 03:23:45.304589249 +0000 UTC m=+360.452190703 I0428 03:23:45.332856 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-53.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:23:45.332840916 +0000 UTC m=+360.480442330 I0428 03:23:45.355158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-53.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-53.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:24:51.059606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:24:51.059673 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 03:24:51.059661982 +0000 UTC m=+426.207263446 I0428 03:24:51.059749 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 03:24:51.059725993 +0000 UTC m=+426.207327437 E0428 03:24:51.074267 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:24:51.074364 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 03:24:51.074355589 +0000 UTC m=+426.221957043 E0428 03:24:51.074396 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:24:51.083836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:24:51.083937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:24:51.083967 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 03:24:51.083959584 +0000 UTC m=+426.231561038 E0428 03:24:51.086306 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 03:24:51.086594 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:24:51.086676 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:24:51.086726 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 03:24:51.121142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:24:51.123658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-c98pw" condition "Approved" to 2026-04-28 03:24:51.123649256 +0000 UTC m=+426.271250680 I0428 03:24:51.136899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-c98pw" condition "Ready" to 2026-04-28 03:24:51.136886958 +0000 UTC m=+426.284488382 I0428 03:24:51.158836 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:24:51.158824307 +0000 UTC m=+426.306425741 I0428 03:24:51.190469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:24:51.190792 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:24:51.190784898 +0000 UTC m=+426.338386322 I0428 03:24:51.202918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:24:51.205153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:24:51.205498 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:24:51.205489697 +0000 UTC m=+426.353091121 I0428 03:24:56.087532 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:24:56.087521366 +0000 UTC m=+431.235122770 I0428 03:25:37.167780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:25:37.167848 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 03:25:37.167842332 +0000 UTC m=+472.315443746 I0428 03:25:37.168214 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 03:25:37.168211198 +0000 UTC m=+472.315812612 I0428 03:25:37.177346 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 03:25:37.177332227 +0000 UTC m=+472.324933641 I0428 03:25:37.177621 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:25:37.177645 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 03:25:37.177640312 +0000 UTC m=+472.325241726 I0428 03:25:37.192289 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 03:25:37.192274323 +0000 UTC m=+472.339875737 I0428 03:25:37.193131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:25:37.193152 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 03:25:37.193147917 +0000 UTC m=+472.340749331 I0428 03:25:37.202783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:37.202864 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 03:25:37.202856836 +0000 UTC m=+472.350458240 I0428 03:25:37.218178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:37.218230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:25:37.218246 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 03:25:37.21824066 +0000 UTC m=+472.365842074 I0428 03:25:37.226595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:37.226658 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:25:37.226678 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 03:25:37.226673158 +0000 UTC m=+472.374274572 I0428 03:25:37.442621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:37.455057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4vkzk" condition "Approved" to 2026-04-28 03:25:37.4550441 +0000 UTC m=+472.602645544 I0428 03:25:37.481464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hgtl4" condition "Approved" to 2026-04-28 03:25:37.481451464 +0000 UTC m=+472.629052898 I0428 03:25:37.508975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4vkzk" condition "Ready" to 2026-04-28 03:25:37.508964466 +0000 UTC m=+472.656565880 I0428 03:25:37.509501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hgtl4" condition "Ready" to 2026-04-28 03:25:37.509487235 +0000 UTC m=+472.657088649 I0428 03:25:37.551836 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:37.55181429 +0000 UTC m=+472.699415714 I0428 03:25:37.552277 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:37.552266467 +0000 UTC m=+472.699867881 I0428 03:25:37.572460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:37.576115 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:37.576103429 +0000 UTC m=+472.723704873 I0428 03:25:37.577450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:37.577703 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:37.577698745 +0000 UTC m=+472.725300159 I0428 03:25:37.591233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:37.591418 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:37.591411901 +0000 UTC m=+472.739013315 I0428 03:25:37.754321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:37.808044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:37.912790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:38.149803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:38.234806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v6t78" condition "Approved" to 2026-04-28 03:25:38.234795024 +0000 UTC m=+473.382396438 I0428 03:25:38.557946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v6t78" condition "Ready" to 2026-04-28 03:25:38.557936053 +0000 UTC m=+473.705537477 I0428 03:25:38.753694 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:38.753678173 +0000 UTC m=+473.901279597 I0428 03:25:38.853004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:46.005868 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" condition "Ready" to 2026-04-28 03:25:46.005846537 +0000 UTC m=+481.153447981 I0428 03:25:46.006138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:25:46.006186 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" condition "Issuing" to 2026-04-28 03:25:46.006174982 +0000 UTC m=+481.153776436 I0428 03:25:46.021112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:46.021351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:25:46.021369 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" condition "Issuing" to 2026-04-28 03:25:46.021365507 +0000 UTC m=+481.168966911 I0428 03:25:46.184102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rzmgf-9wv8h" condition "Approved" to 2026-04-28 03:25:46.184079805 +0000 UTC m=+481.331681219 I0428 03:25:46.201086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rzmgf-9wv8h" condition "Ready" to 2026-04-28 03:25:46.201070729 +0000 UTC m=+481.348672183 I0428 03:25:46.224764 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:46.224752302 +0000 UTC m=+481.372353726 I0428 03:25:46.247776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:46.248256 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:46.248247981 +0000 UTC m=+481.395849405 I0428 03:25:46.265823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:25:46.266142 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rzmgf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:25:46.266133851 +0000 UTC m=+481.413735275 I0428 03:26:01.849298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:26:01.849332 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 03:26:01.849324321 +0000 UTC m=+496.996925745 I0428 03:26:01.849296 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 03:26:01.849280811 +0000 UTC m=+496.996882225 I0428 03:26:01.864310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:26:01.864394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:26:01.864415 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 03:26:01.864408699 +0000 UTC m=+497.012010123 I0428 03:26:02.111475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5mr2v" condition "Approved" to 2026-04-28 03:26:02.111462092 +0000 UTC m=+497.259063506 I0428 03:26:02.137649 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5mr2v" condition "Ready" to 2026-04-28 03:26:02.137637693 +0000 UTC m=+497.285239117 I0428 03:26:02.168528 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:26:02.168515217 +0000 UTC m=+497.316116631 I0428 03:26:02.190773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:26:02.191969 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:26:02.191960026 +0000 UTC m=+497.339561450 I0428 03:26:02.201372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:26:02.209652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:25.671202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:29:25.671477 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 03:29:25.671463486 +0000 UTC m=+700.819064920 I0428 03:29:25.672226 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 03:29:25.672199336 +0000 UTC m=+700.819800750 I0428 03:29:25.686491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:25.686580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:29:25.686602 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 03:29:25.686594473 +0000 UTC m=+700.834195897 I0428 03:29:25.852892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:25.867589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fmprf" condition "Approved" to 2026-04-28 03:29:25.867578461 +0000 UTC m=+701.015179875 I0428 03:29:25.883564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fmprf" condition "Ready" to 2026-04-28 03:29:25.883553709 +0000 UTC m=+701.031155133 I0428 03:29:25.913378 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:29:25.913368627 +0000 UTC m=+701.060970051 I0428 03:29:25.940356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:25.941128 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:29:25.941117008 +0000 UTC m=+701.088718452 I0428 03:29:25.960749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:06.906336 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 03:30:06.906326306 +0000 UTC m=+742.053927720 I0428 03:30:06.906687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:30:06.906716 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 03:30:06.906713731 +0000 UTC m=+742.054315135 I0428 03:30:06.926443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:06.926563 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 03:30:06.926554055 +0000 UTC m=+742.074155479 I0428 03:30:07.065774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:07.102507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-k2wv5" condition "Approved" to 2026-04-28 03:30:07.102493414 +0000 UTC m=+742.250094838 I0428 03:30:07.138219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-k2wv5" condition "Ready" to 2026-04-28 03:30:07.138202251 +0000 UTC m=+742.285803695 I0428 03:30:07.172410 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:07.17236467 +0000 UTC m=+742.319966084 I0428 03:30:07.197304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:07.197727 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:07.197720565 +0000 UTC m=+742.345321969 I0428 03:30:07.216209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:07.216604 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:07.216568257 +0000 UTC m=+742.364169671