I0411 17:42:55.472932 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0411 17:42:55.473031 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0411 17:42:55.473102 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0411 17:42:55.478496 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0411 17:42:55.478985 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0411 17:42:55.479015 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0411 17:42:55.479159 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0411 17:42:55.481886 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0411 17:42:55.496953 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0411 17:42:55.497194 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0411 17:42:55.497223 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0411 17:42:55.500737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0411 17:42:55.504255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0411 17:42:55.509522 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0411 17:42:55.512280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0411 17:42:55.515010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0411 17:42:55.517567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0411 17:42:55.519695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0411 17:42:55.521321 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0411 17:42:55.521339 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0411 17:42:55.521440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0411 17:42:55.523465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0411 17:42:55.527706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0411 17:42:55.529912 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0411 17:42:55.531520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0411 17:42:55.533202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0411 17:42:55.535086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0411 17:42:55.536643 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0411 17:42:55.538354 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0411 17:42:55.540202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0411 17:42:55.542018 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0411 17:42:55.542040 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0411 17:42:55.542917 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0411 17:42:55.547639 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:42:55.547936 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:42:55.549209 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:42:55.549217 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:42:55.549648 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:42:55.550170 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:42:55.551401 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:42:55.552009 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:42:55.552427 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:42:55.620678 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:43:08.678493 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-11 17:43:08.678481602 +0000 UTC m=+13.239882536 I0411 17:43:09.456158 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-11 17:43:09.456140836 +0000 UTC m=+14.017541800 I0411 17:43:09.456427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:43:09.456529 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 17:43:09.456518005 +0000 UTC m=+14.017918969 I0411 17:43:09.473984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0411 17:43:09.474054 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:43:09.474135 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-11 17:43:09.474126876 +0000 UTC m=+14.035527800 E0411 17:43:09.474163 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:43:09.474167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:43:09.474197 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 17:43:09.474186197 +0000 UTC m=+14.035587131 E0411 17:43:09.487428 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0411 17:43:09.488333 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:43:09.488567 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:43:09.488829 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0411 17:43:09.520170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:09.521045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-n4wd9" condition "Approved" to 2026-04-11 17:43:09.521029896 +0000 UTC m=+14.082430840 I0411 17:43:09.536725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-n4wd9" condition "Ready" to 2026-04-11 17:43:09.536713217 +0000 UTC m=+14.098114151 I0411 17:43:09.562565 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:09.562553862 +0000 UTC m=+14.123954796 I0411 17:43:09.579937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:09.580306 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:09.580298537 +0000 UTC m=+14.141699471 I0411 17:43:09.596724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:14.488771 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:14.488751588 +0000 UTC m=+19.050152542 I0411 17:43:36.420653 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-11 17:43:36.420612635 +0000 UTC m=+40.982013569 I0411 17:43:36.420849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:43:36.420965 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 17:43:36.420943541 +0000 UTC m=+40.982344465 I0411 17:43:36.445667 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-11 17:43:36.445641491 +0000 UTC m=+41.007042445 I0411 17:43:36.453784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:36.453853 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:43:36.453907 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 17:43:36.453870998 +0000 UTC m=+41.015271932 I0411 17:43:36.598771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:36.606012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zxvmn" condition "Approved" to 2026-04-11 17:43:36.606003419 +0000 UTC m=+41.167404353 I0411 17:43:36.637360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zxvmn" condition "Ready" to 2026-04-11 17:43:36.637346287 +0000 UTC m=+41.198747251 I0411 17:43:36.671439 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:36.671428854 +0000 UTC m=+41.232829768 I0411 17:43:36.694076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:43:36.694460 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:43:36.694453945 +0000 UTC m=+41.255854869 I0411 17:43:36.725181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:47:50.709599 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Ready" to 2026-04-11 17:47:50.709567997 +0000 UTC m=+295.270968951 I0411 17:47:50.710124 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-243.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:47:50.710152 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Issuing" to 2026-04-11 17:47:50.710145832 +0000 UTC m=+295.271546786 I0411 17:47:50.724991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-243.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-243.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:47:50.725046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-243.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:47:50.725062 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Issuing" to 2026-04-11 17:47:50.725056134 +0000 UTC m=+295.286457098 I0411 17:47:50.874275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-243.nip.io-tls-k9sdd" condition "Approved" to 2026-04-11 17:47:50.874260597 +0000 UTC m=+295.435661551 I0411 17:47:50.902521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-243.nip.io-tls-k9sdd" condition "Ready" to 2026-04-11 17:47:50.902511738 +0000 UTC m=+295.463912672 I0411 17:47:50.926910 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-243.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:47:50.926896648 +0000 UTC m=+295.488297602 I0411 17:47:50.945495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-243.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-243.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:55.207289 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 17:48:55.207241292 +0000 UTC m=+359.768642256 I0411 17:48:55.207541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:55.207594 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 17:48:55.207584109 +0000 UTC m=+359.768985033 I0411 17:48:55.219923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:55.220003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:48:55.220024 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 17:48:55.220016485 +0000 UTC m=+359.781417419 E0411 17:48:55.220315 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:48:55.220380 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-11 17:48:55.220371163 +0000 UTC m=+359.781772077 E0411 17:48:55.220433 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:48:55.231851 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0411 17:48:55.231977 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:48:55.232022 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:48:55.232073 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0411 17:48:55.263493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:55.266162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8mtql" condition "Approved" to 2026-04-11 17:48:55.266149854 +0000 UTC m=+359.827550788 I0411 17:48:55.279286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8mtql" condition "Ready" to 2026-04-11 17:48:55.279271086 +0000 UTC m=+359.840672020 I0411 17:48:55.304400 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:48:55.304385643 +0000 UTC m=+359.865786567 I0411 17:48:55.320998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:48:55.367758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:00.232327 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:00.232313585 +0000 UTC m=+364.793714539 I0411 17:49:39.429113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:39.429168 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 17:49:39.429136279 +0000 UTC m=+403.990537203 I0411 17:49:39.431856 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-11 17:49:39.431842981 +0000 UTC m=+403.993243915 I0411 17:49:39.432092 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 17:49:39.432089126 +0000 UTC m=+403.993490060 I0411 17:49:39.432245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:39.432265 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-11 17:49:39.432261799 +0000 UTC m=+403.993662733 I0411 17:49:39.445694 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 17:49:39.445683609 +0000 UTC m=+404.007084533 I0411 17:49:39.445937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:39.445952 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-11 17:49:39.445949684 +0000 UTC m=+404.007350598 I0411 17:49:39.496380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:39.496436 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 17:49:39.496429669 +0000 UTC m=+404.057830603 I0411 17:49:39.517481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:39.517679 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 17:49:39.517650129 +0000 UTC m=+404.079051063 I0411 17:49:39.518134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:39.518199 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-11 17:49:39.518193679 +0000 UTC m=+404.079594603 I0411 17:49:39.608880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:39.644950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-brtw6" condition "Approved" to 2026-04-11 17:49:39.64493443 +0000 UTC m=+404.206335394 I0411 17:49:39.660815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-brtw6" condition "Ready" to 2026-04-11 17:49:39.660806055 +0000 UTC m=+404.222206989 I0411 17:49:39.687354 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:39.687343519 +0000 UTC m=+404.248744453 I0411 17:49:39.704979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0411 17:49:39.779979 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-7bpbn\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0411 17:49:39.814308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:39.865414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qpc4n" condition "Approved" to 2026-04-11 17:49:39.865404909 +0000 UTC m=+404.426805823 I0411 17:49:39.892142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qpc4n" condition "Ready" to 2026-04-11 17:49:39.892133386 +0000 UTC m=+404.453534300 I0411 17:49:39.922153 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:39.922144257 +0000 UTC m=+404.483545181 I0411 17:49:39.923989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:40.068908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:40.247932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cxvfv" condition "Approved" to 2026-04-11 17:49:40.247912642 +0000 UTC m=+404.809313566 I0411 17:49:40.371357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cxvfv" condition "Ready" to 2026-04-11 17:49:40.371347273 +0000 UTC m=+404.932748207 I0411 17:49:40.964948 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:40.96493507 +0000 UTC m=+405.526336004 I0411 17:49:41.059089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:41.163237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:41.163682 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:41.163673967 +0000 UTC m=+405.725074901 I0411 17:49:41.414351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:47.101728 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:47.101726 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls" condition "Ready" to 2026-04-11 17:49:47.101695215 +0000 UTC m=+411.663096139 I0411 17:49:47.101760 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls" condition "Issuing" to 2026-04-11 17:49:47.101752246 +0000 UTC m=+411.663153170 I0411 17:49:47.112709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:47.112767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:47.112781 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls" condition "Issuing" to 2026-04-11 17:49:47.112776865 +0000 UTC m=+411.674177779 I0411 17:49:47.292072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kxsz6-9jfzh" condition "Approved" to 2026-04-11 17:49:47.292059684 +0000 UTC m=+411.853460608 I0411 17:49:47.307644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kxsz6-9jfzh" condition "Ready" to 2026-04-11 17:49:47.30763352 +0000 UTC m=+411.869034444 I0411 17:49:47.340159 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:47.340146139 +0000 UTC m=+411.901547063 I0411 17:49:47.483003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:47.531288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kxsz6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:59.306777 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-11 17:49:59.306749903 +0000 UTC m=+423.868150837 I0411 17:49:59.307257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:59.307306 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 17:49:59.307293434 +0000 UTC m=+423.868694398 I0411 17:49:59.322978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:59.323137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:59.323205 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 17:49:59.323195178 +0000 UTC m=+423.884596112 I0411 17:49:59.795512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:59.804935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n4fpc" condition "Approved" to 2026-04-11 17:49:59.804921841 +0000 UTC m=+424.366322805 I0411 17:49:59.821262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n4fpc" condition "Ready" to 2026-04-11 17:49:59.821251754 +0000 UTC m=+424.382652688 I0411 17:49:59.856046 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:59.85602932 +0000 UTC m=+424.417430284 I0411 17:49:59.878454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:59.879633 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:59.879623299 +0000 UTC m=+424.441024233 I0411 17:49:59.900027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:10.217645 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-11 17:53:10.217615029 +0000 UTC m=+614.779015963 I0411 17:53:10.217871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:53:10.217990 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-11 17:53:10.217982454 +0000 UTC m=+614.779383398 I0411 17:53:10.233588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:10.233709 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:53:10.233780 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-11 17:53:10.233772385 +0000 UTC m=+614.795173309 I0411 17:53:10.482006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:10.495229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vrw9b" condition "Approved" to 2026-04-11 17:53:10.495218686 +0000 UTC m=+615.056619620 I0411 17:53:10.513909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vrw9b" condition "Ready" to 2026-04-11 17:53:10.51389731 +0000 UTC m=+615.075298234 I0411 17:53:10.535365 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:53:10.535351376 +0000 UTC m=+615.096752310 I0411 17:53:10.555692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:10.604115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:50.465723 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-11 17:53:50.465704091 +0000 UTC m=+655.027105025 I0411 17:53:50.466161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:53:50.466187 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-11 17:53:50.466182648 +0000 UTC m=+655.027583582 I0411 17:53:50.487121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:50.487218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:53:50.487249 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-11 17:53:50.487242193 +0000 UTC m=+655.048643117 I0411 17:53:50.621450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cskf6" condition "Approved" to 2026-04-11 17:53:50.621433396 +0000 UTC m=+655.182834320 I0411 17:53:50.639627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cskf6" condition "Ready" to 2026-04-11 17:53:50.639616047 +0000 UTC m=+655.201016981 I0411 17:53:50.670694 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:53:50.670683531 +0000 UTC m=+655.232084455 I0411 17:53:50.694276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:50.694711 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:53:50.69469695 +0000 UTC m=+655.256097884 I0411 17:53:50.709794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:53:50.710082 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:53:50.710075879 +0000 UTC m=+655.271476803