I0409 22:25:02.260120 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 22:25:02.260282 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 22:25:02.260367 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 22:25:02.267686 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 22:25:02.268254 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 22:25:02.268362 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 22:25:02.268428 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 22:25:02.273070 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 22:25:02.296055 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 22:25:02.296479 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 22:25:02.299456 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 22:25:02.301549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 22:25:02.306985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 22:25:02.312051 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 22:25:02.314406 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 22:25:02.314444 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 22:25:02.314452 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 22:25:02.316710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 22:25:02.318724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 22:25:02.320757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 22:25:02.322914 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 22:25:02.323024 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 22:25:02.327997 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 22:25:02.330111 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 22:25:02.332460 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 22:25:02.334376 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 22:25:02.336214 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 22:25:02.336338 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 22:25:02.338211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 22:25:02.340074 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 22:25:02.342172 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 22:25:02.342215 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 22:25:02.343973 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 22:25:02.351166 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 22:25:02.351986 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 22:25:02.353556 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 22:25:02.377666 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 22:25:02.392154 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 22:25:02.404629 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 22:25:02.416424 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 22:25:02.438219 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 22:25:02.444365 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 22:25:02.458854 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 22:25:16.299081 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 22:25:16.299062489 +0000 UTC m=+14.076255066 I0409 22:25:17.109171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:25:17.109205 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 22:25:17.109198481 +0000 UTC m=+14.886391028 I0409 22:25:17.109773 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 22:25:17.109768895 +0000 UTC m=+14.886961442 E0409 22:25:17.129311 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 22:25:17.129654 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 22:25:17.129642796 +0000 UTC m=+14.906835363 E0409 22:25:17.129705 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 22:25:17.129787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:25:17.129855 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 22:25:17.129846037 +0000 UTC m=+14.907038584 E0409 22:25:17.145348 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 22:25:17.146220 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 22:25:17.146299 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 22:25:17.146283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0409 22:25:17.146344 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 22:25:17.146368 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 22:25:17.146360696 +0000 UTC m=+14.923553253 I0409 22:25:17.151131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lcpbc" condition "Approved" to 2026-04-09 22:25:17.151114005 +0000 UTC m=+14.928306592 I0409 22:25:17.164619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lcpbc" condition "Ready" to 2026-04-09 22:25:17.164606297 +0000 UTC m=+14.941798854 I0409 22:25:17.186070 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:25:17.186053856 +0000 UTC m=+14.963246413 I0409 22:25:17.202651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:25:22.146026 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:25:22.146009188 +0000 UTC m=+19.923201765 I0409 22:25:45.795041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:25:45.795136 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 22:25:45.795124615 +0000 UTC m=+43.572317182 I0409 22:25:45.795580 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 22:25:45.795559065 +0000 UTC m=+43.572751622 I0409 22:25:45.809774 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 22:25:45.809754997 +0000 UTC m=+43.586947554 I0409 22:25:45.831158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:25:45.831242 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:25:45.831266 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 22:25:45.831259182 +0000 UTC m=+43.608451739 I0409 22:25:46.085397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:25:46.094847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bs6hq" condition "Approved" to 2026-04-09 22:25:46.094834005 +0000 UTC m=+43.872026562 I0409 22:25:46.127061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bs6hq" condition "Ready" to 2026-04-09 22:25:46.12704767 +0000 UTC m=+43.904240227 I0409 22:25:46.157102 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:25:46.157079195 +0000 UTC m=+43.934271752 I0409 22:25:46.180061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:25:46.180324 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:25:46.180316168 +0000 UTC m=+43.957508715 I0409 22:25:46.198902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:25:46.212192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:25:46.212472 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:25:46.212460012 +0000 UTC m=+43.989652579 I0409 22:30:35.765037 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-122.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:30:35.765271 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-122.nip.io-tls" condition "Ready" to 2026-04-09 22:30:35.76526313 +0000 UTC m=+333.542455717 I0409 22:30:35.765093 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-122.nip.io-tls" condition "Issuing" to 2026-04-09 22:30:35.765079697 +0000 UTC m=+333.542272284 I0409 22:30:35.781829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-122.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-122.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:30:35.781884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-122.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:30:35.781899 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-122.nip.io-tls" condition "Issuing" to 2026-04-09 22:30:35.781894279 +0000 UTC m=+333.559086836 I0409 22:30:36.081428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-122.nip.io-tls-cmf94" condition "Approved" to 2026-04-09 22:30:36.081404227 +0000 UTC m=+333.858596784 I0409 22:30:36.112769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-122.nip.io-tls-cmf94" condition "Ready" to 2026-04-09 22:30:36.112754205 +0000 UTC m=+333.889946762 I0409 22:30:36.141495 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-122.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:30:36.141482394 +0000 UTC m=+333.918674931 I0409 22:30:36.162269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-122.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-122.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:31:41.105887 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 22:31:41.105862554 +0000 UTC m=+398.883055141 I0409 22:31:41.105863 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:31:41.106289 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 22:31:41.106269614 +0000 UTC m=+398.883462191 E0409 22:31:41.117469 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 22:31:41.117565 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 22:31:41.117554172 +0000 UTC m=+398.894746739 E0409 22:31:41.117595 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 22:31:41.121676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:31:41.122895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:31:41.122954 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 22:31:41.122940034 +0000 UTC m=+398.900132621 E0409 22:31:41.133981 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0409 22:31:41.134140 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 22:31:41.134230 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 22:31:41.134305 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0409 22:31:41.167540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-x8z25" condition "Approved" to 2026-04-09 22:31:41.167521918 +0000 UTC m=+398.944714505 I0409 22:31:41.168304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:31:41.180792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-x8z25" condition "Ready" to 2026-04-09 22:31:41.180780617 +0000 UTC m=+398.957973184 I0409 22:31:41.200713 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:31:41.200697341 +0000 UTC m=+398.977889898 I0409 22:31:41.220929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:31:41.221359 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:31:41.221347495 +0000 UTC m=+398.998540072 I0409 22:31:41.243132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:31:41.243132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:31:46.134448 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:31:46.134433023 +0000 UTC m=+403.911625610 I0409 22:32:28.273958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:32:28.274129 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 22:32:28.274120578 +0000 UTC m=+446.051313125 I0409 22:32:28.274188 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 22:32:28.27416788 +0000 UTC m=+446.051360437 I0409 22:32:28.301014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:32:28.310128 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 22:32:28.310109061 +0000 UTC m=+446.087301608 I0409 22:32:28.306313 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 22:32:28.30629316 +0000 UTC m=+446.083485697 I0409 22:32:28.306654 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:32:28.310553 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 22:32:28.310549636 +0000 UTC m=+446.087742183 I0409 22:32:28.306709 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 22:32:28.306705243 +0000 UTC m=+446.083897790 I0409 22:32:28.307464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:28.310794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:32:28.310810 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 22:32:28.310807663 +0000 UTC m=+446.088000210 I0409 22:32:28.357687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:28.358011 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 22:32:28.358003833 +0000 UTC m=+446.135196380 I0409 22:32:28.364018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:28.364158 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 22:32:28.364153068 +0000 UTC m=+446.141345615 I0409 22:32:28.670815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:28.673082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:28.673367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:28.677792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kkt5c" condition "Approved" to 2026-04-09 22:32:28.67778215 +0000 UTC m=+446.454974687 I0409 22:32:28.705841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kkt5c" condition "Ready" to 2026-04-09 22:32:28.705829531 +0000 UTC m=+446.483022078 I0409 22:32:28.713202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wsm8g" condition "Approved" to 2026-04-09 22:32:28.713191016 +0000 UTC m=+446.490383563 I0409 22:32:28.729268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wsm8g" condition "Ready" to 2026-04-09 22:32:28.729258496 +0000 UTC m=+446.506451033 I0409 22:32:28.737841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t7qvv" condition "Approved" to 2026-04-09 22:32:28.737834348 +0000 UTC m=+446.515026915 I0409 22:32:28.738159 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:32:28.738147849 +0000 UTC m=+446.515340396 I0409 22:32:28.766136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:28.766700 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:32:28.766675654 +0000 UTC m=+446.543868211 I0409 22:32:28.769200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t7qvv" condition "Ready" to 2026-04-09 22:32:28.769193845 +0000 UTC m=+446.546386392 I0409 22:32:29.111203 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:32:29.111128996 +0000 UTC m=+446.888321583 I0409 22:32:29.360577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:29.408710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:29.511104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:29.675791 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:32:29.675772637 +0000 UTC m=+447.452965224 I0409 22:32:29.812823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:29.813407 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:32:29.813393761 +0000 UTC m=+447.590586348 I0409 22:32:30.059576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:37.935995 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qwxf7-tls" condition "Ready" to 2026-04-09 22:32:37.93597796 +0000 UTC m=+455.713170517 I0409 22:32:37.936504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qwxf7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:32:37.936526 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qwxf7-tls" condition "Issuing" to 2026-04-09 22:32:37.936521818 +0000 UTC m=+455.713714375 I0409 22:32:37.950945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qwxf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qwxf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:37.951087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qwxf7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:32:37.951134 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qwxf7-tls" condition "Issuing" to 2026-04-09 22:32:37.951128714 +0000 UTC m=+455.728321271 I0409 22:32:38.100398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qwxf7-szfwl" condition "Approved" to 2026-04-09 22:32:38.100386628 +0000 UTC m=+455.877579175 I0409 22:32:38.116423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qwxf7-szfwl" condition "Ready" to 2026-04-09 22:32:38.116411822 +0000 UTC m=+455.893604369 I0409 22:32:38.153414 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qwxf7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:32:38.153398231 +0000 UTC m=+455.930590788 I0409 22:32:38.173464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qwxf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qwxf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:50.245204 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 22:32:50.245180436 +0000 UTC m=+468.022372993 I0409 22:32:50.245306 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:32:50.245322 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 22:32:50.24531799 +0000 UTC m=+468.022510547 I0409 22:32:50.273975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:50.274108 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 22:32:50.27409945 +0000 UTC m=+468.051292007 I0409 22:32:50.464052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:50.502302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z2v69" condition "Approved" to 2026-04-09 22:32:50.50228879 +0000 UTC m=+468.279481347 I0409 22:32:50.522845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z2v69" condition "Ready" to 2026-04-09 22:32:50.522829582 +0000 UTC m=+468.300022129 I0409 22:32:50.575389 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:32:50.575375073 +0000 UTC m=+468.352567620 I0409 22:32:50.602599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:50.602885 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:32:50.602876209 +0000 UTC m=+468.380068766 I0409 22:32:50.632177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:32:50.632856 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:32:50.632829699 +0000 UTC m=+468.410022256 I0409 22:36:16.688207 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 22:36:16.688174167 +0000 UTC m=+674.465366744 I0409 22:36:16.688179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:36:16.688615 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 22:36:16.688591064 +0000 UTC m=+674.465783641 I0409 22:36:16.706551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:36:16.706611 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 22:36:16.706602609 +0000 UTC m=+674.483795166 I0409 22:36:16.884791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:36:16.917823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-p9ls5" condition "Approved" to 2026-04-09 22:36:16.917791014 +0000 UTC m=+674.694983601 I0409 22:36:16.932388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-p9ls5" condition "Ready" to 2026-04-09 22:36:16.932376776 +0000 UTC m=+674.709569323 I0409 22:36:16.971381 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:36:16.971364871 +0000 UTC m=+674.748557428 I0409 22:36:16.999057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:36:59.955596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:36:59.955665 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 22:36:59.955656049 +0000 UTC m=+717.732848626 I0409 22:36:59.956049 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-09 22:36:59.956041154 +0000 UTC m=+717.733233731 I0409 22:36:59.980665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:36:59.980737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 22:36:59.980763 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 22:36:59.980755286 +0000 UTC m=+717.757947873 I0409 22:37:00.176154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:37:00.181977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-shwpl" condition "Approved" to 2026-04-09 22:37:00.181962412 +0000 UTC m=+717.959154989 I0409 22:37:00.206785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-shwpl" condition "Ready" to 2026-04-09 22:37:00.206771877 +0000 UTC m=+717.983964434 I0409 22:37:00.242732 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 22:37:00.242720656 +0000 UTC m=+718.019913203 I0409 22:37:00.274168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 22:37:00.329105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"