I0408 22:51:54.340320 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 22:51:54.340548 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 22:51:54.340708 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 22:51:54.347604 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 22:51:54.348343 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 22:51:54.348364 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 22:51:54.348457 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 22:51:54.352555 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 22:51:54.366256 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 22:51:54.371767 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 22:51:54.376299 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 22:51:54.376346 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 22:51:54.376418 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 22:51:54.382349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 22:51:54.386574 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 22:51:54.390809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 22:51:54.394233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 22:51:54.396381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 22:51:54.398530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 22:51:54.400411 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 22:51:54.402305 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 22:51:54.407563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 22:51:54.410320 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 22:51:54.412693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 22:51:54.414515 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 22:51:54.414536 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 22:51:54.414671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 22:51:54.416553 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 22:51:54.418415 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 22:51:54.418436 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 22:51:54.418571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 22:51:54.420348 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 22:51:54.425120 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 22:51:54.426096 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 22:51:54.429008 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 22:51:54.429171 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 22:51:54.429121 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 22:51:54.429894 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 22:51:54.430286 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 22:51:54.430702 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 22:51:54.430749 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 22:51:54.431750 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 22:51:54.520230 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 22:52:12.146651 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 22:52:12.146636134 +0000 UTC m=+17.838393860 I0408 22:52:12.894815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:52:12.894872 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 22:52:12.894861879 +0000 UTC m=+18.586619595 I0408 22:52:12.894994 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 22:52:12.894976115 +0000 UTC m=+18.586733831 E0408 22:52:12.910082 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 22:52:12.910192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:52:12.910249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:52:12.910246 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 22:52:12.910237442 +0000 UTC m=+18.601995138 E0408 22:52:12.910308 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 22:52:12.910277 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 22:52:12.910270511 +0000 UTC m=+18.602028207 E0408 22:52:12.923944 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 22:52:12.924054 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 22:52:12.924099 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 22:52:12.924142 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 22:52:12.951932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rgfpf" condition "Approved" to 2026-04-08 22:52:12.951921941 +0000 UTC m=+18.643679637 I0408 22:52:12.965766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rgfpf" condition "Ready" to 2026-04-08 22:52:12.965753235 +0000 UTC m=+18.657510931 I0408 22:52:12.990401 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:52:12.99038347 +0000 UTC m=+18.682141196 I0408 22:52:13.018585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:52:13.019013 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:52:13.019004189 +0000 UTC m=+18.710761875 I0408 22:52:13.025337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:52:13.029554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:52:13.030005 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:52:13.029992669 +0000 UTC m=+18.721750365 I0408 22:52:17.924620 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:52:17.924601003 +0000 UTC m=+23.616358719 I0408 22:52:41.055403 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 22:52:41.055363179 +0000 UTC m=+46.747120875 I0408 22:52:41.056727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:52:41.056759 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 22:52:41.056754895 +0000 UTC m=+46.748512591 I0408 22:52:41.076441 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 22:52:41.076423681 +0000 UTC m=+46.768181367 I0408 22:52:41.082213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:52:41.082278 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 22:52:41.082272056 +0000 UTC m=+46.774029752 I0408 22:52:41.331618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:52:41.360510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kgj5z" condition "Approved" to 2026-04-08 22:52:41.360486856 +0000 UTC m=+47.052244552 I0408 22:52:41.400133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kgj5z" condition "Ready" to 2026-04-08 22:52:41.400115479 +0000 UTC m=+47.091873175 I0408 22:52:41.431453 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:52:41.431433977 +0000 UTC m=+47.123191693 I0408 22:52:41.457114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:52:41.457878 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:52:41.457869343 +0000 UTC m=+47.149627049 I0408 22:52:41.488817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:56:47.086061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:56:47.086617 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready" to 2026-04-08 22:56:47.08627595 +0000 UTC m=+292.778033666 I0408 22:56:47.086665 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Issuing" to 2026-04-08 22:56:47.086100734 +0000 UTC m=+292.777858450 I0408 22:56:47.106359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:56:47.106433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:56:47.106462 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Issuing" to 2026-04-08 22:56:47.106455635 +0000 UTC m=+292.798213351 I0408 22:56:47.474879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-169.nip.io-tls-hg9lm" condition "Approved" to 2026-04-08 22:56:47.474858246 +0000 UTC m=+293.166615962 I0408 22:56:47.497398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-169.nip.io-tls-hg9lm" condition "Ready" to 2026-04-08 22:56:47.497376247 +0000 UTC m=+293.189133963 I0408 22:56:47.529188 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:56:47.529173829 +0000 UTC m=+293.220931525 I0408 22:56:47.550436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:57:51.876175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:57:51.876244 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 22:57:51.876206141 +0000 UTC m=+357.567963857 I0408 22:57:51.876637 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 22:57:51.876612885 +0000 UTC m=+357.568370671 E0408 22:57:51.891529 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 22:57:51.891567 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 22:57:51.891560092 +0000 UTC m=+357.583317788 E0408 22:57:51.891789 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 22:57:51.892369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:57:51.892455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:57:51.892479 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 22:57:51.892474 +0000 UTC m=+357.584231696 E0408 22:57:51.900506 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 22:57:51.901247 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 22:57:51.901552 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 22:57:51.901795 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 22:57:51.929426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hhhfw" condition "Approved" to 2026-04-08 22:57:51.929407328 +0000 UTC m=+357.621165054 I0408 22:57:51.930465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:57:51.943029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hhhfw" condition "Ready" to 2026-04-08 22:57:51.943014742 +0000 UTC m=+357.634772458 I0408 22:57:51.963087 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:57:51.963074326 +0000 UTC m=+357.654832022 I0408 22:57:51.985257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:57:51.986256 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:57:51.986220837 +0000 UTC m=+357.677978523 I0408 22:57:51.986602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:57:51.997688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:57:51.997983 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:57:51.997975285 +0000 UTC m=+357.689732971 I0408 22:57:56.900971 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:57:56.900956854 +0000 UTC m=+362.592714580 I0408 22:58:40.118735 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 22:58:40.118226231 +0000 UTC m=+405.809983917 I0408 22:58:40.120880 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 22:58:40.120873717 +0000 UTC m=+405.812631403 I0408 22:58:40.121485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:58:40.121539 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 22:58:40.121529083 +0000 UTC m=+405.813286769 I0408 22:58:40.122678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:58:40.124406 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 22:58:40.124395763 +0000 UTC m=+405.816153449 I0408 22:58:40.125369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:58:40.125426 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 22:58:40.125420909 +0000 UTC m=+405.817178595 I0408 22:58:40.125486 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 22:58:40.122719532 +0000 UTC m=+405.814477218 I0408 22:58:40.166358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:40.166424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:58:40.166443 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 22:58:40.166436021 +0000 UTC m=+405.858193707 I0408 22:58:40.167462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:40.167920 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:58:40.167977 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 22:58:40.16797008 +0000 UTC m=+405.859727756 I0408 22:58:40.173474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:40.173556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:58:40.173588 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 22:58:40.173581828 +0000 UTC m=+405.865339524 I0408 22:58:40.309649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:40.320793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kwd6x" condition "Approved" to 2026-04-08 22:58:40.320776621 +0000 UTC m=+406.012534317 I0408 22:58:40.355206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kwd6x" condition "Ready" to 2026-04-08 22:58:40.355187649 +0000 UTC m=+406.046945345 I0408 22:58:40.382545 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:58:40.382527335 +0000 UTC m=+406.074285061 I0408 22:58:40.405017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0408 22:58:40.466925 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-jksxb\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0408 22:58:40.511056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:40.535376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-49gdx" condition "Approved" to 2026-04-08 22:58:40.535366876 +0000 UTC m=+406.227124572 I0408 22:58:40.569203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-49gdx" condition "Ready" to 2026-04-08 22:58:40.569186101 +0000 UTC m=+406.260943797 I0408 22:58:40.675433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-svjgb" condition "Approved" to 2026-04-08 22:58:40.675423473 +0000 UTC m=+406.367181159 I0408 22:58:40.708431 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:58:40.708420168 +0000 UTC m=+406.400177864 I0408 22:58:41.088865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-svjgb" condition "Ready" to 2026-04-08 22:58:41.088849397 +0000 UTC m=+406.780607123 I0408 22:58:41.160883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:41.161417 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:58:41.161408926 +0000 UTC m=+406.853166612 I0408 22:58:41.515101 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:58:41.515089797 +0000 UTC m=+407.206847503 I0408 22:58:41.561030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:41.659260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:41.659555 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:58:41.659547539 +0000 UTC m=+407.351305235 I0408 22:58:41.908599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:47.866166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:58:47.866233 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls" condition "Issuing" to 2026-04-08 22:58:47.866213274 +0000 UTC m=+413.557970970 I0408 22:58:47.866306 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls" condition "Ready" to 2026-04-08 22:58:47.866204863 +0000 UTC m=+413.557962619 I0408 22:58:47.879641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:47.879924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:58:47.880062 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls" condition "Issuing" to 2026-04-08 22:58:47.879955417 +0000 UTC m=+413.571713153 I0408 22:58:48.012158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f8x5s-b9gsx" condition "Approved" to 2026-04-08 22:58:48.012143255 +0000 UTC m=+413.703900951 I0408 22:58:48.052991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f8x5s-b9gsx" condition "Ready" to 2026-04-08 22:58:48.052976784 +0000 UTC m=+413.744734510 I0408 22:58:48.217417 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:58:48.217400044 +0000 UTC m=+413.909157770 I0408 22:58:48.317644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:58:48.318132 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:58:48.318121433 +0000 UTC m=+414.009879129 I0408 22:58:48.362095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f8x5s-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:59:00.702671 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 22:59:00.70263542 +0000 UTC m=+426.394393156 I0408 22:59:00.702923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 22:59:00.703095 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 22:59:00.70300942 +0000 UTC m=+426.394767146 I0408 22:59:00.719622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:59:00.719695 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 22:59:00.719688452 +0000 UTC m=+426.411446148 I0408 22:59:00.852454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:59:00.895172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n7rzf" condition "Approved" to 2026-04-08 22:59:00.895144476 +0000 UTC m=+426.586902172 I0408 22:59:00.927635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n7rzf" condition "Ready" to 2026-04-08 22:59:00.927621864 +0000 UTC m=+426.619379550 I0408 22:59:00.968296 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:59:00.968277453 +0000 UTC m=+426.660035139 I0408 22:59:00.989533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:59:00.989847 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 22:59:00.989840629 +0000 UTC m=+426.681598315 I0408 22:59:01.002233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 22:59:01.011546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 23:02:12.096404 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 23:02:12.096366245 +0000 UTC m=+617.788123961 I0408 23:02:12.096491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 23:02:12.096894 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 23:02:12.096865431 +0000 UTC m=+617.788623157 I0408 23:02:12.117022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 23:02:12.117336 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 23:02:12.117319005 +0000 UTC m=+617.809076751 I0408 23:02:12.431714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 23:02:12.464261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9ljqh" condition "Approved" to 2026-04-08 23:02:12.464249093 +0000 UTC m=+618.156006779 I0408 23:02:12.484481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9ljqh" condition "Ready" to 2026-04-08 23:02:12.484466955 +0000 UTC m=+618.176224641 I0408 23:02:12.515809 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 23:02:12.5157955 +0000 UTC m=+618.207553186 I0408 23:02:12.550174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 23:02:12.550565 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 23:02:12.550556461 +0000 UTC m=+618.242314157 I0408 23:02:12.572383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 23:02:12.579075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 23:02:12.579368 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 23:02:12.579359495 +0000 UTC m=+618.271117181 I0408 23:02:54.261879 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-08 23:02:54.26185515 +0000 UTC m=+659.953612846 I0408 23:02:54.262289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 23:02:54.262377 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-08 23:02:54.262342206 +0000 UTC m=+659.954099912 I0408 23:02:54.281034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 23:02:54.281133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 23:02:54.281164 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-08 23:02:54.281155759 +0000 UTC m=+659.972913485 I0408 23:02:54.448179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4cp6k" condition "Approved" to 2026-04-08 23:02:54.44815909 +0000 UTC m=+660.139916776 I0408 23:02:54.467596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4cp6k" condition "Ready" to 2026-04-08 23:02:54.467582744 +0000 UTC m=+660.159340430 I0408 23:02:54.499472 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 23:02:54.499437372 +0000 UTC m=+660.191195068 I0408 23:02:54.519410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"