I0427 12:00:00.361180 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 12:00:00.361371 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 12:00:00.361464 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 12:00:00.367210 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 12:00:00.367580 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 12:00:00.367774 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 12:00:00.367790 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 12:00:00.369800 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 12:00:00.790142 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 12:00:00.795217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 12:00:00.797176 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 12:00:00.797216 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 12:00:00.801646 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 12:00:00.804086 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 12:00:00.804443 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 12:00:00.806392 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 12:00:00.808442 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 12:00:00.810742 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 12:00:00.812845 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 12:00:00.812995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 12:00:00.815546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 12:00:00.829068 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 12:00:00.829366 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 12:00:00.831740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 12:00:00.834333 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 12:00:00.836931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 12:00:00.839400 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 12:00:00.842056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 12:00:00.844569 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 12:00:00.844635 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 12:00:00.847203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 12:00:00.849833 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 12:00:00.850261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 12:00:00.853742 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:00:00.853756 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:00:00.855674 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:00:00.933898 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:00:00.935360 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:00:00.935579 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:00:00.946766 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:00:00.961668 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:00:00.976005 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:00:00.989529 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 12:00:19.096606 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 12:00:19.09658328 +0000 UTC m=+18.766135632 I0427 12:00:19.842965 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:00:19.843009 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 12:00:19.843001222 +0000 UTC m=+19.512553553 I0427 12:00:19.842959 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 12:00:19.842944731 +0000 UTC m=+19.512497082 E0427 12:00:19.857617 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 12:00:19.857802 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 12:00:19.85779178 +0000 UTC m=+19.527344131 E0427 12:00:19.857878 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 12:00:19.859945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:00:19.860356 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 12:00:19.860346948 +0000 UTC m=+19.529899269 E0427 12:00:19.874857 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 12:00:19.875617 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 12:00:19.875753 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 12:00:19.875893 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 12:00:19.882454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:00:19.882640 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 12:00:19.882631487 +0000 UTC m=+19.552183808 I0427 12:00:19.888600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8b2p2" condition "Approved" to 2026-04-27 12:00:19.888588536 +0000 UTC m=+19.558140857 I0427 12:00:19.901919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8b2p2" condition "Ready" to 2026-04-27 12:00:19.901909446 +0000 UTC m=+19.571461757 I0427 12:00:19.931962 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:00:19.931954076 +0000 UTC m=+19.601506387 I0427 12:00:19.950999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:00:19.951223 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:00:19.951217935 +0000 UTC m=+19.620770256 I0427 12:00:19.967496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:00:24.875932 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:00:24.875924109 +0000 UTC m=+24.545476410 I0427 12:00:47.690871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:00:47.690941 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 12:00:47.690932681 +0000 UTC m=+47.360485002 I0427 12:00:47.691169 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 12:00:47.691153073 +0000 UTC m=+47.360705414 I0427 12:00:47.755166 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 12:00:47.75515372 +0000 UTC m=+47.424706031 I0427 12:00:47.759689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:00:47.759764 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 12:00:47.75975773 +0000 UTC m=+47.429310041 I0427 12:00:48.205882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:00:48.242291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7hvjh" condition "Approved" to 2026-04-27 12:00:48.242269416 +0000 UTC m=+47.911821757 I0427 12:00:48.271506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7hvjh" condition "Ready" to 2026-04-27 12:00:48.271493081 +0000 UTC m=+47.941045412 I0427 12:00:48.307408 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:00:48.307397401 +0000 UTC m=+47.976949722 I0427 12:00:48.363702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:00:48.364102 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:00:48.364095369 +0000 UTC m=+48.033647690 I0427 12:00:48.377566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:00:48.377892 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:00:48.37788472 +0000 UTC m=+48.047437031 I0427 12:06:12.298919 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-11.nip.io-tls" condition "Ready" to 2026-04-27 12:06:12.298906604 +0000 UTC m=+371.968458925 I0427 12:06:12.299311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-11.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:06:12.299333 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-11.nip.io-tls" condition "Issuing" to 2026-04-27 12:06:12.299329377 +0000 UTC m=+371.968881698 I0427 12:06:12.320834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-11.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-11.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:06:12.320889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-11.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:06:12.320901 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-11.nip.io-tls" condition "Issuing" to 2026-04-27 12:06:12.320896801 +0000 UTC m=+371.990449122 I0427 12:06:12.503378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-11.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-11.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:06:12.508033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-11.nip.io-tls-q7x5r" condition "Approved" to 2026-04-27 12:06:12.508025206 +0000 UTC m=+372.177577527 I0427 12:06:12.536705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-11.nip.io-tls-q7x5r" condition "Ready" to 2026-04-27 12:06:12.536696026 +0000 UTC m=+372.206248337 I0427 12:06:12.568294 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-11.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:06:12.568281086 +0000 UTC m=+372.237833397 I0427 12:06:12.593316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-11.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-11.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:06:12.593657 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-11.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:06:12.593651675 +0000 UTC m=+372.263203986 I0427 12:06:12.596278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-11.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-11.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:06:12.609009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-11.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-11.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:06:12.609354 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-11.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:06:12.60934737 +0000 UTC m=+372.278899681 I0427 12:07:19.455770 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 12:07:19.455753686 +0000 UTC m=+439.125306017 I0427 12:07:19.455805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:07:19.455864 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 12:07:19.455853737 +0000 UTC m=+439.125406078 E0427 12:07:20.506723 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 12:07:20.506790 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 12:07:20.506781849 +0000 UTC m=+440.176334180 E0427 12:07:20.506813 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 12:07:20.510041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:07:20.510177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:07:20.510238 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 12:07:20.510196762 +0000 UTC m=+440.179749073 E0427 12:07:20.947997 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0427 12:07:20.948100 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 12:07:20.948135 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 12:07:20.948181 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 12:07:22.038334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fn59x" condition "Approved" to 2026-04-27 12:07:22.038326146 +0000 UTC m=+441.707878457 I0427 12:07:22.270793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fn59x" condition "Ready" to 2026-04-27 12:07:22.270782284 +0000 UTC m=+441.940334605 I0427 12:07:22.707430 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:07:22.707419939 +0000 UTC m=+442.376972250 I0427 12:07:22.723168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:07:25.949368 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:07:25.949352506 +0000 UTC m=+445.618904857 I0427 12:08:07.906133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:08:07.906165 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 12:08:07.906158611 +0000 UTC m=+487.575710922 I0427 12:08:07.907405 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 12:08:07.907398699 +0000 UTC m=+487.576951010 I0427 12:08:07.907550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:08:07.907605 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 12:08:07.90759619 +0000 UTC m=+487.577148501 I0427 12:08:07.907738 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 12:08:07.907733161 +0000 UTC m=+487.577285472 I0427 12:08:07.907959 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:08:07.908006 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 12:08:07.908001083 +0000 UTC m=+487.577553414 I0427 12:08:07.908222 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 12:08:07.908215085 +0000 UTC m=+487.577767396 I0427 12:08:07.954813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:07.954877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:08:07.954897 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 12:08:07.954891404 +0000 UTC m=+487.624443725 I0427 12:08:07.961752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:07.963838 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:08:07.963926 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 12:08:07.963867784 +0000 UTC m=+487.633420105 I0427 12:08:07.964254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:07.964353 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:08:07.964421 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 12:08:07.964413428 +0000 UTC m=+487.633965749 I0427 12:08:08.191669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-b5bc9" condition "Approved" to 2026-04-27 12:08:08.19165917 +0000 UTC m=+487.861211501 I0427 12:08:08.206314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:08.224587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-b5bc9" condition "Ready" to 2026-04-27 12:08:08.224578119 +0000 UTC m=+487.894130430 I0427 12:08:08.233947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6p84t" condition "Approved" to 2026-04-27 12:08:08.233934581 +0000 UTC m=+487.903486892 I0427 12:08:08.255485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6p84t" condition "Ready" to 2026-04-27 12:08:08.255477005 +0000 UTC m=+487.925029306 I0427 12:08:08.260493 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:08.260463117 +0000 UTC m=+487.930015428 I0427 12:08:08.307939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:08.308476 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:08.308470276 +0000 UTC m=+487.978022587 I0427 12:08:08.308701 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:08.308694159 +0000 UTC m=+487.978246470 I0427 12:08:08.307278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:08.333023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:08.333220 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:08.333213971 +0000 UTC m=+488.002766282 I0427 12:08:08.335441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:08.335611 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:08.335608097 +0000 UTC m=+488.005160398 I0427 12:08:08.629505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:08.721859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:08.922307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:08.981684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-46cfp" condition "Approved" to 2026-04-27 12:08:08.981668325 +0000 UTC m=+488.651220666 I0427 12:08:09.311910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-46cfp" condition "Ready" to 2026-04-27 12:08:09.311827792 +0000 UTC m=+488.981380113 I0427 12:08:09.576832 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:09.576817824 +0000 UTC m=+489.246370145 I0427 12:08:09.621459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:09.622157 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:09.622146146 +0000 UTC m=+489.291698487 I0427 12:08:09.824763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:22.664850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lts9v-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:08:22.664894 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lts9v-tls" condition "Issuing" to 2026-04-27 12:08:22.664883274 +0000 UTC m=+502.334435595 I0427 12:08:22.665618 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lts9v-tls" condition "Ready" to 2026-04-27 12:08:22.66561019 +0000 UTC m=+502.335162511 I0427 12:08:22.682698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lts9v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lts9v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:22.682798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lts9v-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:08:22.682829 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lts9v-tls" condition "Issuing" to 2026-04-27 12:08:22.682820244 +0000 UTC m=+502.352372585 I0427 12:08:22.927434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lts9v-blh25" condition "Approved" to 2026-04-27 12:08:22.927417631 +0000 UTC m=+502.596969982 I0427 12:08:22.946305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lts9v-blh25" condition "Ready" to 2026-04-27 12:08:22.946296037 +0000 UTC m=+502.615848358 I0427 12:08:22.980507 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lts9v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:22.980496984 +0000 UTC m=+502.650049295 I0427 12:08:23.002722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lts9v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lts9v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:23.070920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lts9v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lts9v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:45.989426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:08:45.989520 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 12:08:45.989507337 +0000 UTC m=+525.659059688 I0427 12:08:45.989426 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 12:08:45.989399856 +0000 UTC m=+525.658952177 I0427 12:08:46.033890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:46.034022 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:08:46.034086 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 12:08:46.034073414 +0000 UTC m=+525.703625765 I0427 12:08:46.525951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:46.532897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xhh96" condition "Approved" to 2026-04-27 12:08:46.532886042 +0000 UTC m=+526.202438353 I0427 12:08:46.549528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xhh96" condition "Ready" to 2026-04-27 12:08:46.549520413 +0000 UTC m=+526.219072714 I0427 12:08:46.585573 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:46.585563891 +0000 UTC m=+526.255116212 I0427 12:08:46.604943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:08:46.647910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:12:00.157386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:12:00.157435 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 12:12:00.1574234 +0000 UTC m=+719.826975751 I0427 12:12:00.157599 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 12:12:00.157587201 +0000 UTC m=+719.827139522 I0427 12:12:00.177816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:12:00.177888 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 12:12:00.177880447 +0000 UTC m=+719.847432768 I0427 12:12:00.317754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:12:00.397754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qct7t" condition "Approved" to 2026-04-27 12:12:00.397742489 +0000 UTC m=+720.067294800 I0427 12:12:00.425051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qct7t" condition "Ready" to 2026-04-27 12:12:00.425039561 +0000 UTC m=+720.094591882 I0427 12:12:00.475036 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:12:00.475022164 +0000 UTC m=+720.144574495 I0427 12:12:00.501466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:12:00.555927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:12:53.658123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 12:12:53.658180 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 12:12:53.658172573 +0000 UTC m=+773.327724884 I0427 12:12:53.658702 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 12:12:53.658696317 +0000 UTC m=+773.328248638 I0427 12:12:53.675804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:12:53.675876 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 12:12:53.675868221 +0000 UTC m=+773.345420542 I0427 12:12:53.785130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:12:53.833788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-s4748" condition "Approved" to 2026-04-27 12:12:53.833774271 +0000 UTC m=+773.503326582 I0427 12:12:53.879335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-s4748" condition "Ready" to 2026-04-27 12:12:53.879326435 +0000 UTC m=+773.548878746 I0427 12:12:53.936262 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:12:53.936251883 +0000 UTC m=+773.605804204 I0427 12:12:53.965132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 12:12:54.016633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"