I0428 16:46:49.886982 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 16:46:49.887223 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 16:46:49.887374 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 16:46:49.891874 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 16:46:49.892256 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 16:46:49.892322 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 16:46:49.892336 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 16:46:49.894675 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 16:46:49.911343 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 16:46:49.911491 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 16:46:49.916794 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 16:46:49.921846 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 16:46:49.929342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 16:46:49.931837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 16:46:49.934476 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 16:46:49.936189 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 16:46:49.937664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 16:46:49.940802 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 16:46:49.940818 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 16:46:49.940862 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 16:46:49.945829 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 16:46:49.954992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 16:46:49.956137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 16:46:49.957972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 16:46:49.959691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 16:46:49.961554 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 16:46:49.963584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 16:46:49.965354 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 16:46:49.965374 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 16:46:49.965388 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 16:46:49.967380 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 16:46:49.967445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 16:46:49.972412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 16:46:49.975153 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 16:46:49.975866 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 16:46:49.977545 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 16:46:49.995266 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 16:46:50.007426 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 16:46:50.016656 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 16:46:50.035123 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 16:46:50.051445 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 16:46:50.064948 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 16:46:50.070586 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 16:47:07.287145 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 16:47:07.287131142 +0000 UTC m=+17.430810460 I0428 16:47:08.038769 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 16:47:08.038755659 +0000 UTC m=+18.182434957 I0428 16:47:08.039019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:47:08.039127 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 16:47:08.039099199 +0000 UTC m=+18.182778517 E0428 16:47:08.054722 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 16:47:08.054798 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 16:47:08.054791621 +0000 UTC m=+18.198470909 E0428 16:47:08.054838 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 16:47:08.056642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:47:08.056754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:47:08.056795 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 16:47:08.056788107 +0000 UTC m=+18.200467395 E0428 16:47:08.069417 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 16:47:08.069517 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 16:47:08.069552 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 16:47:08.069589 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 16:47:08.098402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rdmv9" condition "Approved" to 2026-04-28 16:47:08.098388524 +0000 UTC m=+18.242067832 I0428 16:47:08.112129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rdmv9" condition "Ready" to 2026-04-28 16:47:08.112116664 +0000 UTC m=+18.255795962 I0428 16:47:08.135207 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:47:08.135194817 +0000 UTC m=+18.278874115 I0428 16:47:08.153476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:47:08.153822 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:47:08.153815303 +0000 UTC m=+18.297494601 I0428 16:47:08.160490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:47:08.167072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:47:13.069901 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:47:13.06988175 +0000 UTC m=+23.213561078 I0428 16:47:37.072394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:47:37.073640 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 16:47:37.073597244 +0000 UTC m=+47.217276572 I0428 16:47:37.072429 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 16:47:37.072403998 +0000 UTC m=+47.216083286 I0428 16:47:37.082300 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 16:47:37.082281556 +0000 UTC m=+47.225960844 I0428 16:47:37.133191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:47:37.133410 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 16:47:37.133402471 +0000 UTC m=+47.277081749 I0428 16:47:37.368457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:47:37.403449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xps4x" condition "Approved" to 2026-04-28 16:47:37.40343585 +0000 UTC m=+47.547115148 I0428 16:47:37.443149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xps4x" condition "Ready" to 2026-04-28 16:47:37.443136664 +0000 UTC m=+47.586815962 I0428 16:47:37.477765 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:47:37.477751851 +0000 UTC m=+47.621431149 I0428 16:47:37.504697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:52:07.698410 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:52:07.698460 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-04-28 16:52:07.698376292 +0000 UTC m=+317.842055600 I0428 16:52:07.698525 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Issuing" to 2026-04-28 16:52:07.698517031 +0000 UTC m=+317.842196329 I0428 16:52:07.715898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:52:07.715979 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-04-28 16:52:07.715970599 +0000 UTC m=+317.859649897 I0428 16:52:07.845912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:52:07.878331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-lx7hv" condition "Approved" to 2026-04-28 16:52:07.878317782 +0000 UTC m=+318.021997080 I0428 16:52:07.904286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-lx7hv" condition "Ready" to 2026-04-28 16:52:07.904275476 +0000 UTC m=+318.047954774 I0428 16:52:07.931986 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:52:07.931971645 +0000 UTC m=+318.075650943 I0428 16:52:07.958782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:52:07.959127 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:52:07.959121847 +0000 UTC m=+318.102801135 I0428 16:52:07.976087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:52:07.976563 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:52:07.976552737 +0000 UTC m=+318.120232045 I0428 16:53:13.490048 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 16:53:13.490009165 +0000 UTC m=+383.633688493 I0428 16:53:13.490131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:53:13.490181 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 16:53:13.490171063 +0000 UTC m=+383.633850361 E0428 16:53:13.504600 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 16:53:13.504675 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 16:53:13.504664495 +0000 UTC m=+383.648343793 E0428 16:53:13.504736 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 16:53:13.505529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:53:13.505611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:53:13.505638 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 16:53:13.505631762 +0000 UTC m=+383.649311060 E0428 16:53:13.516701 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 16:53:13.516849 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 16:53:13.516898 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 16:53:13.516951 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 16:53:13.547435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-247j8" condition "Approved" to 2026-04-28 16:53:13.547416976 +0000 UTC m=+383.691096294 I0428 16:53:13.561815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-247j8" condition "Ready" to 2026-04-28 16:53:13.561799291 +0000 UTC m=+383.705478589 I0428 16:53:13.579154 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:53:13.579143651 +0000 UTC m=+383.722822949 I0428 16:53:13.597503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:53:18.518150 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:53:18.518135127 +0000 UTC m=+388.661814445 I0428 16:54:04.421876 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:54:04.421919 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 16:54:04.421909905 +0000 UTC m=+434.565589193 I0428 16:54:04.422036 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 16:54:04.422017016 +0000 UTC m=+434.565696314 I0428 16:54:04.436962 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 16:54:04.436940181 +0000 UTC m=+434.580619479 I0428 16:54:04.437178 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:54:04.437214 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 16:54:04.437206765 +0000 UTC m=+434.580886053 I0428 16:54:04.438999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:54:04.439033 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 16:54:04.439019764 +0000 UTC m=+434.582699062 I0428 16:54:04.439294 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 16:54:04.439289238 +0000 UTC m=+434.582968536 I0428 16:54:04.487692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:04.488063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:54:04.488096 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 16:54:04.488090604 +0000 UTC m=+434.631769892 I0428 16:54:04.488961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:04.489056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:54:04.489097 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 16:54:04.489090409 +0000 UTC m=+434.632769697 I0428 16:54:04.492749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:04.492938 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 16:54:04.49292757 +0000 UTC m=+434.636606888 I0428 16:54:04.709500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q4ccd" condition "Approved" to 2026-04-28 16:54:04.709488118 +0000 UTC m=+434.853167416 I0428 16:54:04.738697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q4ccd" condition "Ready" to 2026-04-28 16:54:04.738681126 +0000 UTC m=+434.882360444 I0428 16:54:04.739349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:04.773388 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:04.773373441 +0000 UTC m=+434.917052729 I0428 16:54:04.782065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dmb5w" condition "Approved" to 2026-04-28 16:54:04.782049197 +0000 UTC m=+434.925728485 I0428 16:54:04.803431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dmb5w" condition "Ready" to 2026-04-28 16:54:04.803411513 +0000 UTC m=+434.947090821 I0428 16:54:04.811212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:04.816271 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:04.816259194 +0000 UTC m=+434.959938482 I0428 16:54:04.820086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:04.844601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:04.844879 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:04.844871083 +0000 UTC m=+434.988550371 I0428 16:54:04.847124 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:04.847102998 +0000 UTC m=+434.990782286 I0428 16:54:04.908497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:04.908928 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:04.908919768 +0000 UTC m=+435.052599066 I0428 16:54:05.156142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:05.364808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ck7x6" condition "Approved" to 2026-04-28 16:54:05.364784599 +0000 UTC m=+435.508463897 I0428 16:54:05.852830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ck7x6" condition "Ready" to 2026-04-28 16:54:05.852808156 +0000 UTC m=+435.996487534 I0428 16:54:06.026568 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:06.026545018 +0000 UTC m=+436.170224316 I0428 16:54:06.126516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:06.127077 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:06.127067084 +0000 UTC m=+436.270746402 I0428 16:54:06.359430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:06.409950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:14.140999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:54:14.141057 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" condition "Issuing" to 2026-04-28 16:54:14.141037084 +0000 UTC m=+444.284716382 I0428 16:54:14.141788 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" condition "Ready" to 2026-04-28 16:54:14.141780019 +0000 UTC m=+444.285459317 I0428 16:54:14.155237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-49z4c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:14.155310 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" condition "Ready" to 2026-04-28 16:54:14.155302396 +0000 UTC m=+444.298981684 I0428 16:54:14.407411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-49z4c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:14.446572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-49z4c-jw27b" condition "Approved" to 2026-04-28 16:54:14.446549256 +0000 UTC m=+444.590228544 I0428 16:54:14.466380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-49z4c-jw27b" condition "Ready" to 2026-04-28 16:54:14.46637006 +0000 UTC m=+444.610049348 I0428 16:54:14.515367 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:14.515352209 +0000 UTC m=+444.659031497 I0428 16:54:14.532557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-49z4c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:14.532925 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:14.532917618 +0000 UTC m=+444.676596906 I0428 16:54:14.554289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-49z4c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:14.554550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-49z4c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:14.556099 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-49z4c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:14.5560894 +0000 UTC m=+444.699768678 I0428 16:54:32.039462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:54:32.039462 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 16:54:32.039440935 +0000 UTC m=+462.183120263 I0428 16:54:32.039515 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 16:54:32.039505267 +0000 UTC m=+462.183184585 I0428 16:54:32.064263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:32.064369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:54:32.064388 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 16:54:32.064381473 +0000 UTC m=+462.208060761 I0428 16:54:32.351712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:54:32.363735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tps2w" condition "Approved" to 2026-04-28 16:54:32.363712669 +0000 UTC m=+462.507391967 I0428 16:54:32.388630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tps2w" condition "Ready" to 2026-04-28 16:54:32.388616576 +0000 UTC m=+462.532295854 I0428 16:54:32.423024 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:54:32.423003219 +0000 UTC m=+462.566682517 I0428 16:54:32.446353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:57:59.695952 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 16:57:59.695912427 +0000 UTC m=+669.839591725 I0428 16:57:59.696376 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:57:59.696415 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 16:57:59.696405291 +0000 UTC m=+669.840084589 I0428 16:57:59.713947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:57:59.714277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:57:59.714392 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 16:57:59.714349974 +0000 UTC m=+669.858029292 I0428 16:57:59.907193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:57:59.915269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mgwqk" condition "Approved" to 2026-04-28 16:57:59.915250607 +0000 UTC m=+670.058929905 I0428 16:57:59.942017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mgwqk" condition "Ready" to 2026-04-28 16:57:59.94200083 +0000 UTC m=+670.085680128 I0428 16:57:59.974042 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:57:59.974024483 +0000 UTC m=+670.117703771 I0428 16:57:59.998253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:58:00.058246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:58:48.979503 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 16:58:48.979461478 +0000 UTC m=+719.123140806 I0428 16:58:48.980075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:58:48.980139 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 16:58:48.980132526 +0000 UTC m=+719.123811854 I0428 16:58:48.999337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:58:48.999390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 16:58:48.999402 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 16:58:48.99939778 +0000 UTC m=+719.143077068 I0428 16:58:49.233037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:58:49.241816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xq4sf" condition "Approved" to 2026-04-28 16:58:49.241798316 +0000 UTC m=+719.385477614 I0428 16:58:49.262067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xq4sf" condition "Ready" to 2026-04-28 16:58:49.262058802 +0000 UTC m=+719.405738090 I0428 16:58:49.301008 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:58:49.300996871 +0000 UTC m=+719.444676169 I0428 16:58:49.324861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:58:49.325592 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:58:49.325584775 +0000 UTC m=+719.469264073 I0428 16:58:49.350064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 16:58:49.350412 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 16:58:49.350405107 +0000 UTC m=+719.494084395 I0428 16:58:49.352656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"