I0423 08:20:20.196306 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0423 08:20:20.196442 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0423 08:20:20.196588 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0423 08:20:20.202388 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0423 08:20:20.203085 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0423 08:20:20.203131 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0423 08:20:20.203253 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0423 08:20:20.206774 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0423 08:20:20.222022 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0423 08:20:20.227513 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0423 08:20:20.229472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0423 08:20:20.236309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0423 08:20:20.238959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0423 08:20:20.242439 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0423 08:20:20.242473 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0423 08:20:20.242551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0423 08:20:20.248276 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0423 08:20:20.248373 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0423 08:20:20.250463 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0423 08:20:20.255127 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0423 08:20:20.255200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0423 08:20:20.257246 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0423 08:20:20.258968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0423 08:20:20.260714 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0423 08:20:20.260731 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0423 08:20:20.260739 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0423 08:20:20.262567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0423 08:20:20.264290 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0423 08:20:20.266353 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0423 08:20:20.267907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0423 08:20:20.271587 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0423 08:20:20.276073 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0423 08:20:20.276520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0423 08:20:20.278639 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 08:20:20.278911 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 08:20:20.279130 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 08:20:20.279675 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 08:20:20.280113 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 08:20:20.280302 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 08:20:20.280502 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 08:20:20.281238 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 08:20:20.281445 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 08:20:20.353210 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 08:20:33.458482 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-23 08:20:33.458465568 +0000 UTC m=+13.289021227 I0423 08:20:34.135423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:20:34.135461 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 08:20:34.135452093 +0000 UTC m=+13.966007722 I0423 08:20:34.135471 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 08:20:34.135455114 +0000 UTC m=+13.966010743 E0423 08:20:34.150876 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 08:20:34.150943 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-23 08:20:34.150936072 +0000 UTC m=+13.981491701 E0423 08:20:34.150965 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 08:20:34.152849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:20:34.152917 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 08:20:34.152910244 +0000 UTC m=+13.983465873 E0423 08:20:34.159034 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0423 08:20:34.159290 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 08:20:34.159319 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 08:20:34.159347 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0423 08:20:34.165585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:20:34.184657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s4xkd" condition "Approved" to 2026-04-23 08:20:34.184647223 +0000 UTC m=+14.015202852 I0423 08:20:34.198686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s4xkd" condition "Ready" to 2026-04-23 08:20:34.198673328 +0000 UTC m=+14.029228957 I0423 08:20:34.220520 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:20:34.220509498 +0000 UTC m=+14.051065127 I0423 08:20:34.234967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:20:39.159520 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:20:39.159506907 +0000 UTC m=+18.990062566 I0423 08:21:00.262660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:21:00.262776 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-23 08:21:00.262740592 +0000 UTC m=+40.093296221 I0423 08:21:00.262701 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 08:21:00.262693111 +0000 UTC m=+40.093248740 I0423 08:21:00.273648 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-23 08:21:00.273635525 +0000 UTC m=+40.104191144 I0423 08:21:00.297500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:21:00.297604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:21:00.297625 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 08:21:00.297621212 +0000 UTC m=+40.128176831 I0423 08:21:00.668497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:21:00.672798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jjjhg" condition "Approved" to 2026-04-23 08:21:00.672789525 +0000 UTC m=+40.503345134 I0423 08:21:00.699030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jjjhg" condition "Ready" to 2026-04-23 08:21:00.699018402 +0000 UTC m=+40.529574021 I0423 08:21:00.725827 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:21:00.725816358 +0000 UTC m=+40.556371977 I0423 08:21:00.752609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:21:00.753225 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:21:00.753215152 +0000 UTC m=+40.583770791 I0423 08:21:00.783275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:25:14.388511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-188.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:25:14.388552 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-188.nip.io-tls" condition "Issuing" to 2026-04-23 08:25:14.388543419 +0000 UTC m=+294.219099058 I0423 08:25:14.389273 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-188.nip.io-tls" condition "Ready" to 2026-04-23 08:25:14.389266934 +0000 UTC m=+294.219822563 I0423 08:25:14.410746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-188.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-188.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:25:14.410895 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-188.nip.io-tls" condition "Ready" to 2026-04-23 08:25:14.410873225 +0000 UTC m=+294.241428854 I0423 08:25:14.782355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-188.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-188.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:25:14.813098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-188.nip.io-tls-dznzz" condition "Approved" to 2026-04-23 08:25:14.813077415 +0000 UTC m=+294.643633074 I0423 08:25:14.850481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-188.nip.io-tls-dznzz" condition "Ready" to 2026-04-23 08:25:14.850471728 +0000 UTC m=+294.681027347 I0423 08:25:14.872651 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-188.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:25:14.872639621 +0000 UTC m=+294.703195270 I0423 08:25:14.887183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-188.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-188.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:25:14.887935 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-188.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:25:14.887928692 +0000 UTC m=+294.718484321 I0423 08:25:14.894400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-188.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-188.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:25:14.906216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-188.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-188.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:25:14.906622 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-188.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:25:14.906612844 +0000 UTC m=+294.737168473 I0423 08:26:18.205040 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:26:18.204974 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 08:26:18.204913524 +0000 UTC m=+358.035469183 I0423 08:26:18.205297 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-23 08:26:18.20528552 +0000 UTC m=+358.035841169 E0423 08:26:18.219967 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 08:26:18.220016 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-23 08:26:18.220008656 +0000 UTC m=+358.050564285 E0423 08:26:18.220057 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 08:26:18.224223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:26:18.224443 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 08:26:18.224433324 +0000 UTC m=+358.054988973 E0423 08:26:18.233309 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0423 08:26:18.233431 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 08:26:18.233471 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 08:26:18.233531 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0423 08:26:18.240614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:26:18.263742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-scrgd" condition "Approved" to 2026-04-23 08:26:18.263723558 +0000 UTC m=+358.094279207 I0423 08:26:18.278365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-scrgd" condition "Ready" to 2026-04-23 08:26:18.278353893 +0000 UTC m=+358.108909512 I0423 08:26:18.296859 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:26:18.296844825 +0000 UTC m=+358.127400454 I0423 08:26:18.317891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:26:18.318135 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:26:18.318125506 +0000 UTC m=+358.148681135 I0423 08:26:18.336883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:26:18.337230 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:26:18.337212659 +0000 UTC m=+358.167768288 I0423 08:26:18.341904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:26:23.234150 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:26:23.234135377 +0000 UTC m=+363.064691026 I0423 08:27:02.358881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:27:02.359008 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-23 08:27:02.358954608 +0000 UTC m=+402.189510267 I0423 08:27:02.363622 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 08:27:02.363612043 +0000 UTC m=+402.194167702 I0423 08:27:02.365842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:27:02.365859 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 08:27:02.3658561 +0000 UTC m=+402.196411719 I0423 08:27:02.366126 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-23 08:27:02.366122074 +0000 UTC m=+402.196677693 I0423 08:27:02.383782 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-23 08:27:02.383770428 +0000 UTC m=+402.214326057 I0423 08:27:02.384121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:27:02.384180 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 08:27:02.384172464 +0000 UTC m=+402.214728083 I0423 08:27:02.410452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:02.417191 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 08:27:02.417180005 +0000 UTC m=+402.247735624 I0423 08:27:02.421477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:02.421568 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:27:02.421588 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 08:27:02.421583247 +0000 UTC m=+402.252138856 I0423 08:27:02.437821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:02.437871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:27:02.437886 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 08:27:02.437881298 +0000 UTC m=+402.268436917 I0423 08:27:02.693824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:02.970099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nr9qp" condition "Approved" to 2026-04-23 08:27:02.970087643 +0000 UTC m=+402.800643262 I0423 08:27:02.998010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nr9qp" condition "Ready" to 2026-04-23 08:27:02.998001652 +0000 UTC m=+402.828557271 I0423 08:27:03.037363 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:27:03.037350784 +0000 UTC m=+402.867906403 I0423 08:27:03.066994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:03.067403 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:27:03.067394197 +0000 UTC m=+402.897949816 I0423 08:27:03.108850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:03.156636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-twshg" condition "Approved" to 2026-04-23 08:27:03.156625941 +0000 UTC m=+402.987181560 I0423 08:27:03.164108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fzmh8" condition "Approved" to 2026-04-23 08:27:03.164096521 +0000 UTC m=+402.994652160 I0423 08:27:03.172323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-twshg" condition "Ready" to 2026-04-23 08:27:03.172307834 +0000 UTC m=+403.002863443 I0423 08:27:03.177400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fzmh8" condition "Ready" to 2026-04-23 08:27:03.177393014 +0000 UTC m=+403.007948643 I0423 08:27:03.456666 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:27:03.456657662 +0000 UTC m=+403.287213291 I0423 08:27:03.566440 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:27:03.566421575 +0000 UTC m=+403.396977224 E0423 08:27:03.601162 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-2zhzv\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0423 08:27:03.700425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:03.815963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:03.816821 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:27:03.816806099 +0000 UTC m=+403.647361758 I0423 08:27:04.102840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:10.491633 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p78mb-tls" condition "Ready" to 2026-04-23 08:27:10.491611912 +0000 UTC m=+410.322167531 I0423 08:27:10.491729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p78mb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:27:10.491769 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p78mb-tls" condition "Issuing" to 2026-04-23 08:27:10.491758804 +0000 UTC m=+410.322314423 I0423 08:27:10.510328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p78mb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p78mb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:10.510391 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p78mb-tls" condition "Ready" to 2026-04-23 08:27:10.510385181 +0000 UTC m=+410.340940800 I0423 08:27:10.976070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p78mb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p78mb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:11.005481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p78mb-mvzlk" condition "Approved" to 2026-04-23 08:27:11.005466951 +0000 UTC m=+410.836022580 I0423 08:27:11.029051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p78mb-mvzlk" condition "Ready" to 2026-04-23 08:27:11.029037115 +0000 UTC m=+410.859592744 I0423 08:27:11.058063 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p78mb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:27:11.058050116 +0000 UTC m=+410.888605725 I0423 08:27:11.074489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p78mb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p78mb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:11.074949 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p78mb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:27:11.074941444 +0000 UTC m=+410.905497073 I0423 08:27:11.097826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p78mb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p78mb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:23.072969 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-23 08:27:23.072956952 +0000 UTC m=+422.903512561 I0423 08:27:23.073263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:27:23.073278 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 08:27:23.073275867 +0000 UTC m=+422.903831486 I0423 08:27:23.089846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:23.089895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:27:23.089908 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 08:27:23.089902966 +0000 UTC m=+422.920458585 I0423 08:27:23.234019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hzzkb" condition "Approved" to 2026-04-23 08:27:23.234009054 +0000 UTC m=+423.064564673 I0423 08:27:23.248056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hzzkb" condition "Ready" to 2026-04-23 08:27:23.248044223 +0000 UTC m=+423.078599852 I0423 08:27:23.277365 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:27:23.277352861 +0000 UTC m=+423.107908490 I0423 08:27:23.295200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:23.295445 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:27:23.295437713 +0000 UTC m=+423.125993342 I0423 08:27:23.313347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:23.317007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:27:23.317286 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:27:23.317277613 +0000 UTC m=+423.147833242 I0423 08:27:23.317652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:30:38.096287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:30:38.096336 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-23 08:30:38.09632174 +0000 UTC m=+617.926877359 I0423 08:30:38.096330 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 08:30:38.09631929 +0000 UTC m=+617.926874939 I0423 08:30:38.110857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:30:38.110931 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:30:38.110947 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 08:30:38.110940647 +0000 UTC m=+617.941496276 I0423 08:30:38.264987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9brjb" condition "Approved" to 2026-04-23 08:30:38.264976648 +0000 UTC m=+618.095532257 I0423 08:30:38.283711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9brjb" condition "Ready" to 2026-04-23 08:30:38.283700731 +0000 UTC m=+618.114256360 I0423 08:30:38.321184 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:30:38.321170554 +0000 UTC m=+618.151726173 I0423 08:30:38.346273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:30:38.346663 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:30:38.346656388 +0000 UTC m=+618.177212017 I0423 08:30:38.365383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:31:20.322889 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 08:31:20.322873791 +0000 UTC m=+660.153429420 I0423 08:31:20.323008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 08:31:20.323076 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-23 08:31:20.323070273 +0000 UTC m=+660.153625892 I0423 08:31:20.341757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:31:20.342040 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 08:31:20.342028955 +0000 UTC m=+660.172584604 I0423 08:31:20.713044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 08:31:20.745488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-njzhv" condition "Approved" to 2026-04-23 08:31:20.745474774 +0000 UTC m=+660.576030413 I0423 08:31:20.764651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-njzhv" condition "Ready" to 2026-04-23 08:31:20.764636648 +0000 UTC m=+660.595192297 I0423 08:31:20.792141 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 08:31:20.792130883 +0000 UTC m=+660.622686502 I0423 08:31:20.810906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"