I0428 06:06:24.016242 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0428 06:06:24.016481 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0428 06:06:24.016589 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 06:06:24.021145 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0428 06:06:24.021805 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0428 06:06:24.021924 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0428 06:06:24.022062 1 controller.go:156] "cert-manager/controller: starting leader election" I0428 06:06:24.026193 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 06:06:24.043550 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0428 06:06:24.049942 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0428 06:06:24.053425 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0428 06:06:24.053461 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0428 06:06:24.056174 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0428 06:06:24.058552 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0428 06:06:24.060660 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0428 06:06:24.062587 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0428 06:06:24.064212 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0428 06:06:24.064813 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0428 06:06:24.068860 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0428 06:06:24.071665 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0428 06:06:24.073891 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0428 06:06:24.076399 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0428 06:06:24.078790 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0428 06:06:24.080618 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0428 06:06:24.080633 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0428 06:06:24.080641 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0428 06:06:24.080744 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0428 06:06:24.082436 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0428 06:06:24.082549 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0428 06:06:24.084379 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0428 06:06:24.088577 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0428 06:06:24.091746 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0428 06:06:24.095799 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0428 06:06:35.888351 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 06:06:35.888301144 +0000 UTC m=+11.903002411 I0428 06:06:36.589603 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:06:36.5895843 +0000 UTC m=+12.604285577 I0428 06:06:36.590973 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:06:36.591009 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 06:06:36.591001905 +0000 UTC m=+12.605703182 E0428 06:06:36.604415 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:06:36.604488 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 06:06:36.604479771 +0000 UTC m=+12.619181018 E0428 06:06:36.604512 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:06:36.607486 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:06:36.607536 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:06:36.607549 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 06:06:36.607544004 +0000 UTC m=+12.622245251 E0428 06:06:36.617313 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0428 06:06:36.617414 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:06:36.617447 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:06:36.617513 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0428 06:06:36.643882 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:06:36.644187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fm7gk" condition "Approved" to 2026-04-28 06:06:36.644172429 +0000 UTC m=+12.658873686 I0428 06:06:36.654654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fm7gk" condition "Ready" to 2026-04-28 06:06:36.654644382 +0000 UTC m=+12.669345639 I0428 06:06:36.672900 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:06:36.67288734 +0000 UTC m=+12.687588587 I0428 06:06:36.694898 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:06:36.695272 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:06:36.695263451 +0000 UTC m=+12.709964698 I0428 06:06:36.699808 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:06:36.708216 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:06:36.709321 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:06:36.709848 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:06:36.709834649 +0000 UTC m=+12.724535916 I0428 06:06:41.617718 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:06:41.617702121 +0000 UTC m=+17.632403368 I0428 06:07:02.492521 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:07:02.492560 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 06:07:02.492545206 +0000 UTC m=+38.507246453 I0428 06:07:02.492687 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 06:07:02.492670277 +0000 UTC m=+38.507371524 I0428 06:07:02.514946 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 06:07:02.514932921 +0000 UTC m=+38.529634168 I0428 06:07:02.518213 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:07:02.518285 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:07:02.518309 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 06:07:02.518302484 +0000 UTC m=+38.533003741 I0428 06:07:02.866033 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:07:02.875525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s9ghp" condition "Approved" to 2026-04-28 06:07:02.875505952 +0000 UTC m=+38.890207229 I0428 06:07:02.904024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s9ghp" condition "Ready" to 2026-04-28 06:07:02.904014438 +0000 UTC m=+38.918715665 I0428 06:07:02.932651 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:07:02.932637556 +0000 UTC m=+38.947338823 I0428 06:07:02.957767 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:07:02.958460 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:07:02.958454685 +0000 UTC m=+38.973155932 I0428 06:07:02.973340 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:07:02.973794 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:07:02.973786478 +0000 UTC m=+38.988487725 I0428 06:09:42.727299 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-04-28 06:09:42.727212027 +0000 UTC m=+198.741913294 I0428 06:09:42.727374 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:09:42.727401 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-28 06:09:42.727394232 +0000 UTC m=+198.742095479 I0428 06:09:42.748018 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:42.748059 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-04-28 06:09:42.748054618 +0000 UTC m=+198.762755865 I0428 06:09:42.975123 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:43.007681 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-8v29g" condition "Approved" to 2026-04-28 06:09:43.00766277 +0000 UTC m=+199.022364077 I0428 06:09:43.040951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-8v29g" condition "Ready" to 2026-04-28 06:09:43.040938366 +0000 UTC m=+199.055639623 I0428 06:09:43.071674 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:09:43.071657003 +0000 UTC m=+199.086358270 I0428 06:09:43.089738 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:43.090446 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:09:43.090440095 +0000 UTC m=+199.105141322 I0428 06:09:43.106035 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:09:43.106623 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:09:43.106612676 +0000 UTC m=+199.121313933 I0428 06:10:38.454436 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 06:10:38.454347081 +0000 UTC m=+254.469048328 I0428 06:10:38.454554 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:10:38.454593 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 06:10:38.454584096 +0000 UTC m=+254.469285343 E0428 06:10:38.468703 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:10:38.468747 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 06:10:38.468732297 +0000 UTC m=+254.483433544 E0428 06:10:38.468791 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:10:38.477326 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:10:38.477405 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 06:10:38.477396797 +0000 UTC m=+254.492098044 E0428 06:10:38.491359 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0428 06:10:38.491684 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:10:38.491736 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:10:38.491950 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0428 06:10:38.495867 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:10:38.521514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ptltg" condition "Approved" to 2026-04-28 06:10:38.521498585 +0000 UTC m=+254.536199842 I0428 06:10:38.535302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ptltg" condition "Ready" to 2026-04-28 06:10:38.535290958 +0000 UTC m=+254.549992205 I0428 06:10:38.556497 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:10:38.556484924 +0000 UTC m=+254.571186171 I0428 06:10:38.574340 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:10:38.574649 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:10:38.574639962 +0000 UTC m=+254.589341219 I0428 06:10:38.589978 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:10:38.591795 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:10:43.492735 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:10:43.492714018 +0000 UTC m=+259.507415285 I0428 06:11:23.460280 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:11:23.460377 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 06:11:23.460331148 +0000 UTC m=+299.475032385 I0428 06:11:23.469825 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 06:11:23.469814198 +0000 UTC m=+299.484515435 I0428 06:11:23.471020 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:11:23.471037 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 06:11:23.471034301 +0000 UTC m=+299.485735538 I0428 06:11:23.471542 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 06:11:23.471538341 +0000 UTC m=+299.486239578 I0428 06:11:23.500406 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 06:11:23.500395029 +0000 UTC m=+299.515096266 I0428 06:11:23.500511 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:11:23.500550 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 06:11:23.500543482 +0000 UTC m=+299.515244719 I0428 06:11:23.536084 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:23.536145 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:11:23.555846 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 06:11:23.555826295 +0000 UTC m=+299.570527552 I0428 06:11:23.556642 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:23.556680 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 06:11:23.556675371 +0000 UTC m=+299.571376608 I0428 06:11:23.592294 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:23.592360 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 06:11:23.59235477 +0000 UTC m=+299.607056007 I0428 06:11:23.776981 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:23.813261 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:23.832584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fkkpm" condition "Approved" to 2026-04-28 06:11:23.832572023 +0000 UTC m=+299.847273260 I0428 06:11:23.868029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fkkpm" condition "Ready" to 2026-04-28 06:11:23.868015417 +0000 UTC m=+299.882716644 I0428 06:11:23.870650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-h5r7t" condition "Approved" to 2026-04-28 06:11:23.870643367 +0000 UTC m=+299.885344604 I0428 06:11:23.888738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-h5r7t" condition "Ready" to 2026-04-28 06:11:23.888725482 +0000 UTC m=+299.903426729 I0428 06:11:23.896039 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:11:23.89602701 +0000 UTC m=+299.910728247 I0428 06:11:23.912830 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:23.913222 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:11:23.913216627 +0000 UTC m=+299.927917864 I0428 06:11:23.914725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pldhh" condition "Approved" to 2026-04-28 06:11:23.914712086 +0000 UTC m=+299.929413323 I0428 06:11:23.920882 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:11:23.920871574 +0000 UTC m=+299.935572811 I0428 06:11:23.997762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pldhh" condition "Ready" to 2026-04-28 06:11:23.997700416 +0000 UTC m=+300.012401663 I0428 06:11:24.292287 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:24.396431 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:24.396975 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:11:24.396970725 +0000 UTC m=+300.411671962 I0428 06:11:24.798352 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:11:24.798338374 +0000 UTC m=+300.813039621 I0428 06:11:24.841806 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:11:24.841791789 +0000 UTC m=+300.856493026 I0428 06:11:24.938067 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:24.990933 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:25.089880 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:30.326594 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" condition "Ready" to 2026-04-28 06:11:30.326573453 +0000 UTC m=+306.341274730 I0428 06:11:30.327423 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:11:30.327458 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" condition "Issuing" to 2026-04-28 06:11:30.327449259 +0000 UTC m=+306.342150546 I0428 06:11:30.340786 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:30.340856 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:11:30.340871 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" condition "Issuing" to 2026-04-28 06:11:30.34086694 +0000 UTC m=+306.355568167 I0428 06:11:30.531120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m6dq6-44nsh" condition "Approved" to 2026-04-28 06:11:30.531106781 +0000 UTC m=+306.545808028 I0428 06:11:30.549389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m6dq6-44nsh" condition "Ready" to 2026-04-28 06:11:30.549378412 +0000 UTC m=+306.564079659 I0428 06:11:30.580744 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:11:30.580723758 +0000 UTC m=+306.595425035 I0428 06:11:30.598890 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:30.599386 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:11:30.599378425 +0000 UTC m=+306.614079672 I0428 06:11:30.605385 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:30.622004 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m6dq6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:44.961901 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 06:11:44.961861047 +0000 UTC m=+320.976562314 I0428 06:11:44.962402 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:11:44.962440 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 06:11:44.962432277 +0000 UTC m=+320.977133524 I0428 06:11:44.979985 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:44.980029 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:11:44.980135 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 06:11:44.980038435 +0000 UTC m=+320.994739672 I0428 06:11:45.243911 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:45.252612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sqm44" condition "Approved" to 2026-04-28 06:11:45.252601986 +0000 UTC m=+321.267303233 I0428 06:11:45.271254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sqm44" condition "Ready" to 2026-04-28 06:11:45.271239161 +0000 UTC m=+321.285940398 I0428 06:11:45.302898 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:11:45.302888089 +0000 UTC m=+321.317589326 I0428 06:11:45.320706 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:11:45.374549 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:14:50.988074 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:14:50.988183 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 06:14:50.988165517 +0000 UTC m=+507.002866774 I0428 06:14:50.988360 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 06:14:50.988342409 +0000 UTC m=+507.003043686 I0428 06:14:51.006670 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:14:51.006866 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 06:14:51.006857769 +0000 UTC m=+507.021559006 I0428 06:14:51.150176 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:14:51.182293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bl9gl" condition "Approved" to 2026-04-28 06:14:51.182272666 +0000 UTC m=+507.196973903 I0428 06:14:51.206991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bl9gl" condition "Ready" to 2026-04-28 06:14:51.206978499 +0000 UTC m=+507.221679736 I0428 06:14:51.247108 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:14:51.247092741 +0000 UTC m=+507.261794008 I0428 06:14:51.264742 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:14:51.265214 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:14:51.265208395 +0000 UTC m=+507.279909642 I0428 06:14:51.281124 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:15:29.363102 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:15:29.364449 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 06:15:29.364443379 +0000 UTC m=+545.379144636 I0428 06:15:29.363855 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 06:15:29.363833211 +0000 UTC m=+545.378534458 I0428 06:15:29.387984 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:15:29.388072 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:15:29.388126 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 06:15:29.388101141 +0000 UTC m=+545.402802398 I0428 06:15:29.616013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-pjckv" condition "Approved" to 2026-04-28 06:15:29.616001626 +0000 UTC m=+545.630702863 I0428 06:15:29.616741 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:15:29.635725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-pjckv" condition "Ready" to 2026-04-28 06:15:29.635714105 +0000 UTC m=+545.650415352 I0428 06:15:29.666733 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:15:29.666719353 +0000 UTC m=+545.681420600 I0428 06:15:29.687704 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:15:29.731968 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"