I0427 16:04:59.202164 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0427 16:04:59.202268 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0427 16:04:59.202351 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 16:04:59.205439 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0427 16:04:59.205817 1 controller.go:156] "cert-manager/controller: starting leader election" I0427 16:04:59.205963 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0427 16:04:59.205998 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0427 16:04:59.208332 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 16:04:59.221405 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0427 16:04:59.221655 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0427 16:04:59.227190 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0427 16:04:59.233896 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0427 16:04:59.236310 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0427 16:04:59.238640 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0427 16:04:59.238734 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0427 16:04:59.241518 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0427 16:04:59.243572 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0427 16:04:59.245895 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0427 16:04:59.247935 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0427 16:04:59.247950 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0427 16:04:59.248433 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0427 16:04:59.257276 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0427 16:04:59.260467 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0427 16:04:59.262962 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0427 16:04:59.265334 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0427 16:04:59.269238 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0427 16:04:59.271330 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0427 16:04:59.271365 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0427 16:04:59.274903 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0427 16:04:59.276899 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0427 16:04:59.281839 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0427 16:04:59.284978 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0427 16:04:59.285044 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0427 16:05:15.341783 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 16:05:15.341746923 +0000 UTC m=+16.174957058 I0427 16:05:16.099274 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:05:16.099337 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 16:05:16.099327201 +0000 UTC m=+16.932537346 I0427 16:05:16.099997 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 16:05:16.09995972 +0000 UTC m=+16.933169855 E0427 16:05:16.112149 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:05:16.112199 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 16:05:16.112192493 +0000 UTC m=+16.945402608 E0427 16:05:16.112220 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:05:16.128398 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:05:16.128531 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 16:05:16.128516456 +0000 UTC m=+16.961726611 E0427 16:05:16.133002 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0427 16:05:16.133602 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:05:16.133632 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:05:16.133697 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0427 16:05:16.141031 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:05:16.141082 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 16:05:16.141074015 +0000 UTC m=+16.974284140 I0427 16:05:16.141768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qw5bl" condition "Approved" to 2026-04-27 16:05:16.141762427 +0000 UTC m=+16.974972542 I0427 16:05:16.158639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qw5bl" condition "Ready" to 2026-04-27 16:05:16.158624224 +0000 UTC m=+16.991834329 I0427 16:05:16.178730 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:05:16.17871937 +0000 UTC m=+17.011929475 I0427 16:05:16.194935 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:05:16.195322 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:05:16.195313535 +0000 UTC m=+17.028523650 I0427 16:05:16.208875 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:05:21.133946 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:05:21.133920249 +0000 UTC m=+21.967130384 I0427 16:05:42.100175 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 16:05:42.100121529 +0000 UTC m=+42.933331674 I0427 16:05:42.100222 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:05:42.100270 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 16:05:42.100264175 +0000 UTC m=+42.933474290 I0427 16:05:42.114612 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 16:05:42.114597334 +0000 UTC m=+42.947807439 I0427 16:05:42.124402 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:05:42.124566 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:05:42.124615 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 16:05:42.124608395 +0000 UTC m=+42.957818510 I0427 16:05:42.586091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jvzmb" condition "Approved" to 2026-04-27 16:05:42.586080224 +0000 UTC m=+43.419290329 I0427 16:05:42.617501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jvzmb" condition "Ready" to 2026-04-27 16:05:42.61748996 +0000 UTC m=+43.450700075 I0427 16:05:42.646664 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:05:42.64665039 +0000 UTC m=+43.479860495 I0427 16:05:42.672962 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:05:42.723803 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:28.043787 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-191.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:28.043825 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-191.nip.io-tls" condition "Issuing" to 2026-04-27 16:08:28.043814392 +0000 UTC m=+208.877024537 I0427 16:08:28.044355 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-191.nip.io-tls" condition "Ready" to 2026-04-27 16:08:28.04433736 +0000 UTC m=+208.877547465 I0427 16:08:28.065543 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:28.065660 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-191.nip.io-tls" condition "Ready" to 2026-04-27 16:08:28.065651772 +0000 UTC m=+208.898861887 I0427 16:08:28.154527 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:28.184194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-191.nip.io-tls-s2gcv" condition "Approved" to 2026-04-27 16:08:28.184157764 +0000 UTC m=+209.017367879 I0427 16:08:28.210653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-191.nip.io-tls-s2gcv" condition "Ready" to 2026-04-27 16:08:28.210638444 +0000 UTC m=+209.043848569 I0427 16:08:28.242850 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-191.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:28.242827921 +0000 UTC m=+209.076038066 I0427 16:08:28.264862 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:28.265410 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-191.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:28.265402472 +0000 UTC m=+209.098612587 I0427 16:08:28.277328 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:28.284154 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:24.442232 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:24.442304 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 16:09:24.442295698 +0000 UTC m=+265.275505853 I0427 16:09:24.442840 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 16:09:24.442833326 +0000 UTC m=+265.276043451 E0427 16:09:24.457439 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:09:24.457480 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 16:09:24.457471675 +0000 UTC m=+265.290681790 E0427 16:09:24.457534 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:09:24.459632 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:24.460012 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:24.460043 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 16:09:24.460036678 +0000 UTC m=+265.293246793 E0427 16:09:24.467901 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0427 16:09:24.467999 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:09:24.468032 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:09:24.468069 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0427 16:09:24.495723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-tzq6s" condition "Approved" to 2026-04-27 16:09:24.49570626 +0000 UTC m=+265.328916385 I0427 16:09:24.508348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-tzq6s" condition "Ready" to 2026-04-27 16:09:24.508336043 +0000 UTC m=+265.341546148 I0427 16:09:24.530970 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:24.530955499 +0000 UTC m=+265.364165624 I0427 16:09:24.542815 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:29.468485 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:29.468469747 +0000 UTC m=+270.301679862 I0427 16:10:09.307629 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:10:09.307672 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 16:10:09.307664551 +0000 UTC m=+310.140874666 I0427 16:10:09.307756 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 16:10:09.307743269 +0000 UTC m=+310.140953374 I0427 16:10:09.331767 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 16:10:09.331753219 +0000 UTC m=+310.164963314 I0427 16:10:09.332582 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:10:09.335098 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 16:10:09.335086418 +0000 UTC m=+310.168296513 I0427 16:10:09.332811 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:10:09.335429 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 16:10:09.335424261 +0000 UTC m=+310.168634366 I0427 16:10:09.332864 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 16:10:09.332855766 +0000 UTC m=+310.166065871 I0427 16:10:09.346128 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:09.346184 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 16:10:09.346178843 +0000 UTC m=+310.179388948 I0427 16:10:09.374622 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:09.374664 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:10:09.374678 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 16:10:09.374673547 +0000 UTC m=+310.207883652 I0427 16:10:09.375349 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:09.375415 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 16:10:09.375410351 +0000 UTC m=+310.208620466 I0427 16:10:09.544006 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:09.558709 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:09.582062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hj5k4" condition "Approved" to 2026-04-27 16:10:09.582048878 +0000 UTC m=+310.415258993 I0427 16:10:09.592236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f4zm7" condition "Approved" to 2026-04-27 16:10:09.592222102 +0000 UTC m=+310.425432207 I0427 16:10:09.606137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hj5k4" condition "Ready" to 2026-04-27 16:10:09.606122056 +0000 UTC m=+310.439332191 I0427 16:10:09.610568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f4zm7" condition "Ready" to 2026-04-27 16:10:09.610556831 +0000 UTC m=+310.443766966 I0427 16:10:09.643232 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:10:09.643207098 +0000 UTC m=+310.476417253 I0427 16:10:09.655911 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:10:09.655896217 +0000 UTC m=+310.489106332 I0427 16:10:09.668080 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:09.677609 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:09.678561 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:10:09.678546585 +0000 UTC m=+310.511756730 I0427 16:10:09.710697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zhcxk" condition "Approved" to 2026-04-27 16:10:09.710677493 +0000 UTC m=+310.543887648 I0427 16:10:10.214893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zhcxk" condition "Ready" to 2026-04-27 16:10:10.214862012 +0000 UTC m=+311.048072127 I0427 16:10:10.422401 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:10.462903 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:10.804875 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:10:10.80486065 +0000 UTC m=+311.638070765 I0427 16:10:10.953045 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:10.953601 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:10:10.953592305 +0000 UTC m=+311.786802420 I0427 16:10:11.204343 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:11.254501 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:18.958564 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls" condition "Ready" to 2026-04-27 16:10:18.958520468 +0000 UTC m=+319.791730603 I0427 16:10:18.958616 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:10:18.958643 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls" condition "Issuing" to 2026-04-27 16:10:18.958636566 +0000 UTC m=+319.791846711 I0427 16:10:18.974580 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:18.974641 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:10:18.974658 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls" condition "Issuing" to 2026-04-27 16:10:18.974651699 +0000 UTC m=+319.807861814 I0427 16:10:19.142151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nxm6j-5nc9z" condition "Approved" to 2026-04-27 16:10:19.142133088 +0000 UTC m=+319.975343233 I0427 16:10:19.161816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nxm6j-5nc9z" condition "Ready" to 2026-04-27 16:10:19.161805481 +0000 UTC m=+319.995015596 I0427 16:10:19.185915 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:10:19.185902186 +0000 UTC m=+320.019112301 I0427 16:10:19.202124 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:19.255097 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nxm6j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:32.728414 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 16:10:32.728399507 +0000 UTC m=+333.561609622 I0427 16:10:32.728999 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:10:32.729031 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 16:10:32.729023818 +0000 UTC m=+333.562233943 I0427 16:10:32.741774 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:32.741862 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 16:10:32.741851558 +0000 UTC m=+333.575061683 I0427 16:10:33.079593 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:10:33.117477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j7bjz" condition "Approved" to 2026-04-27 16:10:33.117458774 +0000 UTC m=+333.950668879 I0427 16:10:33.134148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j7bjz" condition "Ready" to 2026-04-27 16:10:33.134139017 +0000 UTC m=+333.967349122 I0427 16:10:33.169967 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:10:33.169922113 +0000 UTC m=+334.003132228 I0427 16:10:33.188321 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:38.592826 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 16:13:38.592672504 +0000 UTC m=+519.425882639 I0427 16:13:38.593247 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:13:38.594932 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 16:13:38.594917324 +0000 UTC m=+519.428127519 I0427 16:13:38.615628 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:38.615669 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:13:38.615682 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 16:13:38.615678482 +0000 UTC m=+519.448888577 I0427 16:13:38.938064 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:38.954934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ccl5p" condition "Approved" to 2026-04-27 16:13:38.954923989 +0000 UTC m=+519.788134094 I0427 16:13:38.972115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ccl5p" condition "Ready" to 2026-04-27 16:13:38.972101693 +0000 UTC m=+519.805311818 I0427 16:13:39.001272 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:13:39.001258618 +0000 UTC m=+519.834468723 I0427 16:13:39.042415 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:39.042884 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:13:39.042878667 +0000 UTC m=+519.876088772 I0427 16:14:19.791046 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 16:14:19.79102391 +0000 UTC m=+560.624234025 I0427 16:14:19.791775 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:14:19.791810 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 16:14:19.791802855 +0000 UTC m=+560.625012970 I0427 16:14:19.813110 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:14:19.813206 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:14:19.813227 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 16:14:19.813222049 +0000 UTC m=+560.646432164 I0427 16:14:20.093779 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:14:20.102552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ttq58" condition "Approved" to 2026-04-27 16:14:20.102541006 +0000 UTC m=+560.935751131 I0427 16:14:20.118725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ttq58" condition "Ready" to 2026-04-27 16:14:20.118710495 +0000 UTC m=+560.951920610 I0427 16:14:20.147349 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:14:20.147338066 +0000 UTC m=+560.980548171 I0427 16:14:20.167138 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:14:20.167720 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:14:20.16771307 +0000 UTC m=+561.000923185 I0427 16:14:20.190878 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"