I0428 06:02:12.461516 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 06:02:12.461913 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 06:02:12.462132 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 06:02:12.467938 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 06:02:12.468426 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 06:02:12.468543 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 06:02:12.468581 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 06:02:12.471306 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 06:02:12.486438 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 06:02:12.489890 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 06:02:12.495920 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 06:02:12.496096 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 06:02:12.499977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 06:02:12.502932 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 06:02:12.505058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 06:02:12.507738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 06:02:12.510085 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 06:02:12.512282 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 06:02:12.512548 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 06:02:12.514898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 06:02:12.517051 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 06:02:12.517075 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 06:02:12.517085 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 06:02:12.517157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 06:02:12.522994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 06:02:12.525538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 06:02:12.527708 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 06:02:12.527790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 06:02:12.530128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 06:02:12.532532 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 06:02:12.534745 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 06:02:12.536427 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 06:02:12.539050 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 06:02:12.542288 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:02:12.542825 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:02:12.546149 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:02:12.547181 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:02:12.547766 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:02:12.568337 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:02:12.585140 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:02:12.601717 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:02:12.614568 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:02:12.639912 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:02:24.561035 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 06:02:24.561004324 +0000 UTC m=+12.136394179 I0428 06:02:25.284552 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:02:25.284535894 +0000 UTC m=+12.859925789 I0428 06:02:25.285897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:02:25.286551 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 06:02:25.286527648 +0000 UTC m=+12.861917563 E0428 06:02:25.441456 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:02:25.441573 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 06:02:25.441562919 +0000 UTC m=+13.016952784 E0428 06:02:25.441624 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:02:25.448781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:02:25.448893 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:02:25.448883089 +0000 UTC m=+13.024272964 E0428 06:02:25.512904 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 06:02:25.513192 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:02:25.513270 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:02:25.513311 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 06:02:25.514222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:02:25.514392 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:02:25.514272823 +0000 UTC m=+13.089662688 I0428 06:02:25.574424 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:02:25.574417934 +0000 UTC m=+13.149807809 I0428 06:02:25.574417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ltcmb" condition "Approved" to 2026-04-28 06:02:25.574393534 +0000 UTC m=+13.149783399 I0428 06:02:25.704834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:02:25.707302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ltcmb" condition "Ready" to 2026-04-28 06:02:25.70728337 +0000 UTC m=+13.282673255 I0428 06:02:25.755484 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:02:25.755472074 +0000 UTC m=+13.330861959 I0428 06:02:25.770919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:02:30.514297 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:02:30.514283888 +0000 UTC m=+18.089673753 I0428 06:02:53.371479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:02:53.371511 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 06:02:53.371486556 +0000 UTC m=+40.946876441 I0428 06:02:53.371540 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 06:02:53.371530097 +0000 UTC m=+40.946920002 I0428 06:02:53.395844 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 06:02:53.395831071 +0000 UTC m=+40.971220926 I0428 06:02:53.410592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:02:53.410662 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 06:02:53.410655028 +0000 UTC m=+40.986044883 I0428 06:02:53.584921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:02:53.617242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wnsfx" condition "Approved" to 2026-04-28 06:02:53.617232043 +0000 UTC m=+41.192621918 I0428 06:02:53.651304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wnsfx" condition "Ready" to 2026-04-28 06:02:53.651292392 +0000 UTC m=+41.226682247 I0428 06:02:53.679360 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:02:53.679343859 +0000 UTC m=+41.254733714 I0428 06:02:53.701033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:07:19.970953 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:07:19.971031 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-28 06:07:19.971005235 +0000 UTC m=+307.546395090 I0428 06:07:19.971077 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-28 06:07:19.971012865 +0000 UTC m=+307.546402730 I0428 06:07:20.033163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:07:20.033213 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-28 06:07:20.033207335 +0000 UTC m=+307.608597220 I0428 06:07:20.211435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:07:20.294431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-dhkk7" condition "Approved" to 2026-04-28 06:07:20.29442287 +0000 UTC m=+307.869812715 I0428 06:07:20.365684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-dhkk7" condition "Ready" to 2026-04-28 06:07:20.365651263 +0000 UTC m=+307.941041158 I0428 06:07:20.509295 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:07:20.509280091 +0000 UTC m=+308.084669946 I0428 06:07:20.639897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:07:21.148680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:27.963712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:08:27.963934 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 06:08:27.963924475 +0000 UTC m=+375.539314380 I0428 06:08:27.964233 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 06:08:27.964219801 +0000 UTC m=+375.539609656 E0428 06:08:27.980377 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:08:27.980431 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 06:08:27.980421402 +0000 UTC m=+375.555811267 E0428 06:08:27.981364 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:08:27.985378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:27.985479 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 06:08:27.985469152 +0000 UTC m=+375.560859017 E0428 06:08:28.016930 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 06:08:28.018182 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:08:28.018249 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:08:28.018319 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 06:08:28.021073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:28.066956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mx89k" condition "Approved" to 2026-04-28 06:08:28.066944118 +0000 UTC m=+375.642333983 I0428 06:08:28.093151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mx89k" condition "Ready" to 2026-04-28 06:08:28.093136705 +0000 UTC m=+375.668526570 I0428 06:08:28.117851 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:08:28.117836689 +0000 UTC m=+375.693226554 I0428 06:08:28.146031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:28.146412 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:08:28.146403358 +0000 UTC m=+375.721793223 I0428 06:08:28.151444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:28.165484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:33.017771 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:08:33.01776246 +0000 UTC m=+380.593152315 I0428 06:09:14.310449 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 06:09:14.310392497 +0000 UTC m=+421.885782342 I0428 06:09:14.310716 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:14.310749 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 06:09:14.310742384 +0000 UTC m=+421.886132249 I0428 06:09:14.328119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:14.333482 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 06:09:14.333464702 +0000 UTC m=+421.908854577 I0428 06:09:14.328213 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 06:09:14.328200659 +0000 UTC m=+421.903590534 I0428 06:09:14.334935 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 06:09:14.334927711 +0000 UTC m=+421.910317556 I0428 06:09:14.334994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:14.339551 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 06:09:14.339533132 +0000 UTC m=+421.914922987 I0428 06:09:14.342293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:14.342346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:14.342363 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 06:09:14.342360197 +0000 UTC m=+421.917750052 I0428 06:09:14.378607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:14.378753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:14.378818 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 06:09:14.378810626 +0000 UTC m=+421.954200501 I0428 06:09:14.379454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:14.379621 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 06:09:14.379610902 +0000 UTC m=+421.955000777 I0428 06:09:14.654802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z7qmh" condition "Approved" to 2026-04-28 06:09:14.65478909 +0000 UTC m=+422.230178955 I0428 06:09:14.686125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z7qmh" condition "Ready" to 2026-04-28 06:09:14.686112188 +0000 UTC m=+422.261502053 I0428 06:09:14.713941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pd8cb" condition "Approved" to 2026-04-28 06:09:14.713929677 +0000 UTC m=+422.289319542 I0428 06:09:14.747736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pd8cb" condition "Ready" to 2026-04-28 06:09:14.747721173 +0000 UTC m=+422.323111058 I0428 06:09:14.749797 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:09:14.749791794 +0000 UTC m=+422.325181639 I0428 06:09:14.844608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0428 06:09:14.870098 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-wfxwh\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0428 06:09:14.874476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:14.874499 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 06:09:14.874492904 +0000 UTC m=+422.449882759 I0428 06:09:14.876145 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:09:14.876136386 +0000 UTC m=+422.451526241 I0428 06:09:14.905603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:14.906077 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:09:14.906069697 +0000 UTC m=+422.481459562 I0428 06:09:14.917151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:15.100563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0428 06:09:15.148418 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-rwnsg\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0428 06:09:15.255170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-68rfv" condition "Approved" to 2026-04-28 06:09:15.255151024 +0000 UTC m=+422.830540879 I0428 06:09:15.362186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-68rfv" condition "Ready" to 2026-04-28 06:09:15.362175182 +0000 UTC m=+422.937565037 I0428 06:09:15.847467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:16.097425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:16.157895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-t8wkq" condition "Approved" to 2026-04-28 06:09:16.157867283 +0000 UTC m=+423.733257178 I0428 06:09:16.408093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-t8wkq" condition "Ready" to 2026-04-28 06:09:16.408080042 +0000 UTC m=+423.983469907 I0428 06:09:16.698616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:16.947851 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:09:16.94783833 +0000 UTC m=+424.523228195 I0428 06:09:17.049462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:17.351776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:23.150395 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m445v-tls" condition "Ready" to 2026-04-28 06:09:23.150378963 +0000 UTC m=+430.725768828 I0428 06:09:23.151064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m445v-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:23.151090 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m445v-tls" condition "Issuing" to 2026-04-28 06:09:23.151085527 +0000 UTC m=+430.726475392 I0428 06:09:23.169131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m445v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m445v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:23.169255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m445v-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:23.169288 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m445v-tls" condition "Issuing" to 2026-04-28 06:09:23.16927819 +0000 UTC m=+430.744668075 I0428 06:09:23.508874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m445v-jpmfp" condition "Approved" to 2026-04-28 06:09:23.508856345 +0000 UTC m=+431.084246210 I0428 06:09:23.537599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m445v-jpmfp" condition "Ready" to 2026-04-28 06:09:23.537586253 +0000 UTC m=+431.112976118 I0428 06:09:23.569106 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m445v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:09:23.569092835 +0000 UTC m=+431.144482700 I0428 06:09:23.616128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m445v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m445v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:48.062264 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 06:09:48.062219876 +0000 UTC m=+455.637609741 I0428 06:09:48.062292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:48.062323 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 06:09:48.062315958 +0000 UTC m=+455.637705813 I0428 06:09:48.083954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:48.084025 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:48.084042 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 06:09:48.084035854 +0000 UTC m=+455.659425709 I0428 06:09:48.318478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:48.327699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z2zdj" condition "Approved" to 2026-04-28 06:09:48.327691146 +0000 UTC m=+455.903081001 I0428 06:09:48.345708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z2zdj" condition "Ready" to 2026-04-28 06:09:48.345697802 +0000 UTC m=+455.921087667 I0428 06:09:48.375500 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:09:48.375487198 +0000 UTC m=+455.950877053 I0428 06:09:48.398328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:12:55.986957 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 06:12:55.986913083 +0000 UTC m=+643.562302948 I0428 06:12:55.987464 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:12:55.987497 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 06:12:55.987489492 +0000 UTC m=+643.562879347 I0428 06:12:56.008187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:12:56.008274 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 06:12:56.008267935 +0000 UTC m=+643.583657790 I0428 06:12:56.254618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:12:56.291684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m5jm5" condition "Approved" to 2026-04-28 06:12:56.291672994 +0000 UTC m=+643.867062859 I0428 06:12:56.314281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m5jm5" condition "Ready" to 2026-04-28 06:12:56.314270337 +0000 UTC m=+643.889660202 I0428 06:12:56.342675 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:12:56.342665372 +0000 UTC m=+643.918055227 I0428 06:12:56.368305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:13:37.257867 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 06:13:37.257843316 +0000 UTC m=+684.833233181 I0428 06:13:37.258729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:13:37.258761 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 06:13:37.25875531 +0000 UTC m=+684.834145175 I0428 06:13:37.291209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:13:37.291268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:13:37.291282 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 06:13:37.291276116 +0000 UTC m=+684.866665991 I0428 06:13:37.524266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zr4nk" condition "Approved" to 2026-04-28 06:13:37.524252465 +0000 UTC m=+685.099642320 I0428 06:13:37.541083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zr4nk" condition "Ready" to 2026-04-28 06:13:37.541075842 +0000 UTC m=+685.116465687 I0428 06:13:37.580142 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:13:37.580128049 +0000 UTC m=+685.155517904 I0428 06:13:37.601966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:13:37.602322 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:13:37.602316861 +0000 UTC m=+685.177706716 I0428 06:13:37.610864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:13:37.611198 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:13:37.611189181 +0000 UTC m=+685.186579046