I0407 01:22:04.744912 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 01:22:04.745010 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 01:22:04.745086 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 01:22:04.748434 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 01:22:04.748781 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 01:22:04.748892 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 01:22:04.748897 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 01:22:04.751214 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 01:22:04.767135 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 01:22:04.767330 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 01:22:04.773997 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 01:22:04.776682 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 01:22:04.776710 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 01:22:04.776719 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 01:22:04.777087 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 01:22:04.779364 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 01:22:04.781889 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 01:22:04.783805 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 01:22:04.783979 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 01:22:04.785694 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 01:22:04.791527 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 01:22:04.793874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 01:22:04.796382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 01:22:04.798843 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 01:22:04.800422 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 01:22:04.802208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 01:22:04.804100 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 01:22:04.805879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 01:22:04.807770 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 01:22:04.811900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 01:22:04.813641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 01:22:04.815768 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 01:22:04.815819 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 01:22:04.818612 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:22:04.819234 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:22:04.819837 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:22:04.835897 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:22:04.853648 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:22:04.869492 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:22:04.886239 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:22:04.901911 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:22:04.909248 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:22:04.923637 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:22:20.869989 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 01:22:20.869975111 +0000 UTC m=+16.163107207 I0407 01:22:21.603923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:22:21.603950 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 01:22:21.603945148 +0000 UTC m=+16.897077234 I0407 01:22:21.604140 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 01:22:21.604125805 +0000 UTC m=+16.897257911 E0407 01:22:21.618377 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:22:21.618467 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 01:22:21.618458738 +0000 UTC m=+16.911590844 E0407 01:22:21.618605 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:22:21.620613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:22:21.620688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:22:21.620714 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 01:22:21.620707732 +0000 UTC m=+16.913839828 E0407 01:22:21.631399 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 01:22:21.631619 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:22:21.631707 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:22:21.631782 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 01:22:21.663969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:22:21.664050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vhmjc" condition "Approved" to 2026-04-07 01:22:21.664036231 +0000 UTC m=+16.957168327 I0407 01:22:21.681892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vhmjc" condition "Ready" to 2026-04-07 01:22:21.68187673 +0000 UTC m=+16.975008856 I0407 01:22:21.703942 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:22:21.703928556 +0000 UTC m=+16.997060672 I0407 01:22:21.719898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:22:21.720179 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:22:21.720172988 +0000 UTC m=+17.013305084 I0407 01:22:21.734354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:22:26.632255 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:22:26.632241979 +0000 UTC m=+21.925374105 I0407 01:22:49.371967 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 01:22:49.371955875 +0000 UTC m=+44.665087971 I0407 01:22:49.372068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:22:49.372114 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 01:22:49.37210599 +0000 UTC m=+44.665238086 I0407 01:22:49.389954 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 01:22:49.389941145 +0000 UTC m=+44.683073231 I0407 01:22:49.406232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:22:49.406298 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 01:22:49.406292786 +0000 UTC m=+44.699424872 I0407 01:22:49.537169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:22:49.570176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-679wt" condition "Approved" to 2026-04-07 01:22:49.570160073 +0000 UTC m=+44.863292189 I0407 01:22:49.600004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-679wt" condition "Ready" to 2026-04-07 01:22:49.599993277 +0000 UTC m=+44.893125373 I0407 01:22:49.636276 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:22:49.636266057 +0000 UTC m=+44.929398133 I0407 01:22:49.669152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:00.702075 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready" to 2026-04-07 01:27:00.702061204 +0000 UTC m=+295.995193300 I0407 01:27:00.702451 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:00.702551 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Issuing" to 2026-04-07 01:27:00.702503984 +0000 UTC m=+295.995636110 I0407 01:27:00.740746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:00.740843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-35.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:00.740868 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Issuing" to 2026-04-07 01:27:00.740861769 +0000 UTC m=+296.033993855 I0407 01:27:00.955121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:00.961310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-f2pmv" condition "Approved" to 2026-04-07 01:27:00.961299268 +0000 UTC m=+296.254431364 I0407 01:27:00.986452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-f2pmv" condition "Ready" to 2026-04-07 01:27:00.986439636 +0000 UTC m=+296.279571732 I0407 01:27:01.013695 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:01.013681009 +0000 UTC m=+296.306813135 I0407 01:27:01.035392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:05.066310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:28:05.066366 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 01:28:05.066352626 +0000 UTC m=+360.359484752 I0407 01:28:05.066305 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 01:28:05.066271045 +0000 UTC m=+360.359403161 E0407 01:28:05.079142 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:28:05.079249 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 01:28:05.079170175 +0000 UTC m=+360.372302281 E0407 01:28:05.079300 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:28:05.080087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:05.080177 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 01:28:05.080169153 +0000 UTC m=+360.373301249 E0407 01:28:05.092515 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 01:28:05.092726 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:28:05.092772 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:28:05.092854 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 01:28:05.095265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:05.112932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z7wb6" condition "Approved" to 2026-04-07 01:28:05.112918719 +0000 UTC m=+360.406050835 I0407 01:28:05.123124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z7wb6" condition "Ready" to 2026-04-07 01:28:05.123112081 +0000 UTC m=+360.416244177 I0407 01:28:05.144054 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:05.144036316 +0000 UTC m=+360.437168442 I0407 01:28:05.161523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:10.093096 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:10.093080957 +0000 UTC m=+365.386213083 I0407 01:28:49.684410 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:28:49.684460 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 01:28:49.684454753 +0000 UTC m=+404.977586839 I0407 01:28:49.684745 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 01:28:49.684741537 +0000 UTC m=+404.977873623 I0407 01:28:49.695988 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 01:28:49.695973949 +0000 UTC m=+404.989106035 I0407 01:28:49.696359 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 01:28:49.696354545 +0000 UTC m=+404.989486631 I0407 01:28:49.696551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:28:49.696569 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 01:28:49.696566159 +0000 UTC m=+404.989698245 I0407 01:28:49.696740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:28:49.696751 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 01:28:49.696749062 +0000 UTC m=+404.989881148 I0407 01:28:49.722383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:49.722505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:28:49.722571 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 01:28:49.72256414 +0000 UTC m=+405.015696226 I0407 01:28:49.722995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:49.723439 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 01:28:49.723048438 +0000 UTC m=+405.016180534 I0407 01:28:49.725584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:49.725671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:28:49.725764 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 01:28:49.725758852 +0000 UTC m=+405.018890948 I0407 01:28:49.862915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xjzcc" condition "Approved" to 2026-04-07 01:28:49.862905733 +0000 UTC m=+405.156037839 I0407 01:28:49.863214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:49.890727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xjzcc" condition "Ready" to 2026-04-07 01:28:49.890716514 +0000 UTC m=+405.183848610 I0407 01:28:49.914241 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:49.914231694 +0000 UTC m=+405.207363790 I0407 01:28:49.942441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:49.942816 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:49.942807907 +0000 UTC m=+405.235940013 I0407 01:28:49.964167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:49.964409 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:49.964402767 +0000 UTC m=+405.257534843 I0407 01:28:49.967785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:49.988338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-llhmj" condition "Approved" to 2026-04-07 01:28:49.988329365 +0000 UTC m=+405.281461451 I0407 01:28:50.051529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:50.057568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-llhmj" condition "Ready" to 2026-04-07 01:28:50.057548953 +0000 UTC m=+405.350681039 I0407 01:28:50.184028 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:50.184016808 +0000 UTC m=+405.477148904 I0407 01:28:50.290934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:50.291272 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:50.291266212 +0000 UTC m=+405.584398298 I0407 01:28:50.631421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:50.672529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:51.002664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fd8x4" condition "Approved" to 2026-04-07 01:28:51.00265067 +0000 UTC m=+406.295782796 I0407 01:28:51.337721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fd8x4" condition "Ready" to 2026-04-07 01:28:51.337710315 +0000 UTC m=+406.630842411 I0407 01:28:51.534577 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-fd8x4" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-dx5vq" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0407 01:28:51.729893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wdpvr" condition "Approved" to 2026-04-07 01:28:51.729877841 +0000 UTC m=+407.023009937 I0407 01:28:52.080864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wdpvr" condition "Ready" to 2026-04-07 01:28:52.0808518 +0000 UTC m=+407.373983896 I0407 01:28:52.291239 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:52.291224948 +0000 UTC m=+407.584357044 I0407 01:28:52.371337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:58.201939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:28:58.201987 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" condition "Issuing" to 2026-04-07 01:28:58.201976975 +0000 UTC m=+413.495109091 I0407 01:28:58.202171 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" condition "Ready" to 2026-04-07 01:28:58.202141908 +0000 UTC m=+413.495274004 I0407 01:28:58.219491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:58.219574 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" condition "Ready" to 2026-04-07 01:28:58.219564075 +0000 UTC m=+413.512696171 I0407 01:28:58.446719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:58.482386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c2sjk-h8p4x" condition "Approved" to 2026-04-07 01:28:58.482374008 +0000 UTC m=+413.775506094 I0407 01:28:58.516422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c2sjk-h8p4x" condition "Ready" to 2026-04-07 01:28:58.516405179 +0000 UTC m=+413.809537265 I0407 01:28:58.571611 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:58.571596757 +0000 UTC m=+413.864728833 I0407 01:28:58.598125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:58.598550 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:58.598540636 +0000 UTC m=+413.891672722 I0407 01:28:58.610120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:58.794166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c2sjk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:10.947122 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 01:29:10.947107865 +0000 UTC m=+426.240239961 I0407 01:29:10.947288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:29:10.947350 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 01:29:10.947341739 +0000 UTC m=+426.240473855 I0407 01:29:11.031330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:11.031485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:29:11.031504 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 01:29:11.031499318 +0000 UTC m=+426.324631404 I0407 01:29:11.213681 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-shvq8" condition "Approved" to 2026-04-07 01:29:11.21366346 +0000 UTC m=+426.506795586 I0407 01:29:11.237695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-shvq8" condition "Ready" to 2026-04-07 01:29:11.237684203 +0000 UTC m=+426.530816289 I0407 01:29:11.272434 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:29:11.272419953 +0000 UTC m=+426.565552039 I0407 01:29:11.292863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:11.320390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:20.286108 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 01:32:20.286092844 +0000 UTC m=+615.579224930 I0407 01:32:20.286598 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:32:20.286613 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 01:32:20.286610761 +0000 UTC m=+615.579742847 I0407 01:32:20.300422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:20.300543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:32:20.300574 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 01:32:20.300564951 +0000 UTC m=+615.593697077 I0407 01:32:20.586493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:20.596195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wxbhd" condition "Approved" to 2026-04-07 01:32:20.596180511 +0000 UTC m=+615.889312597 I0407 01:32:20.622266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wxbhd" condition "Ready" to 2026-04-07 01:32:20.622255006 +0000 UTC m=+615.915387102 I0407 01:32:20.654449 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:32:20.65443734 +0000 UTC m=+615.947569436 I0407 01:32:20.673364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:20.674000 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:32:20.673989711 +0000 UTC m=+615.967121827 I0407 01:32:20.717800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:33:02.533453 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 01:33:02.533440063 +0000 UTC m=+657.826572149 I0407 01:33:02.533805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:33:02.533917 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 01:33:02.533908719 +0000 UTC m=+657.827040835 I0407 01:33:02.552234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:33:02.552601 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 01:33:02.552587745 +0000 UTC m=+657.845719841 I0407 01:33:02.775862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:33:02.812537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2cg56" condition "Approved" to 2026-04-07 01:33:02.812526889 +0000 UTC m=+658.105658985 I0407 01:33:02.830979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2cg56" condition "Ready" to 2026-04-07 01:33:02.830970662 +0000 UTC m=+658.124102748 I0407 01:33:02.860162 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:33:02.860152651 +0000 UTC m=+658.153284737 I0407 01:33:02.881836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"