I0427 16:00:45.914816 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 16:00:45.915017 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 16:00:45.915128 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 16:00:45.918560 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 16:00:45.919155 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 16:00:45.920426 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 16:00:45.920538 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 16:00:45.924850 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 16:00:45.939212 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 16:00:45.939664 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 16:00:45.942810 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 16:00:45.945652 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 16:00:45.948856 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 16:00:45.948904 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 16:00:45.949013 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 16:00:45.956177 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 16:00:45.958964 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 16:00:45.961751 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 16:00:45.964555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 16:00:45.967199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 16:00:45.970460 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 16:00:45.973428 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 16:00:45.977825 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 16:00:45.977879 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 16:00:45.981489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 16:00:45.983667 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 16:00:45.983875 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 16:00:45.986178 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 16:00:45.988390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 16:00:45.990614 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 16:00:45.993140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 16:00:45.995518 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 16:00:45.995663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 16:00:45.998563 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:00:45.998575 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:00:46.001631 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:00:46.013648 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:00:46.034311 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:00:46.054021 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:00:46.066654 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:00:46.089371 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:00:46.092866 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:00:46.108395 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:01:06.808212 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 16:01:06.808192879 +0000 UTC m=+20.931229852 I0427 16:01:07.529274 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 16:01:07.529260583 +0000 UTC m=+21.652297526 I0427 16:01:07.529947 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:01:07.529966 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 16:01:07.529962203 +0000 UTC m=+21.652999146 E0427 16:01:07.546370 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:01:07.546463 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 16:01:07.546451499 +0000 UTC m=+21.669488462 E0427 16:01:07.546495 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:01:07.548878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:01:07.548961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:01:07.548995 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 16:01:07.54898623 +0000 UTC m=+21.672023183 E0427 16:01:07.563649 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 16:01:07.564905 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:01:07.565070 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:01:07.565238 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 16:01:07.595555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:01:07.603348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rt79j" condition "Approved" to 2026-04-27 16:01:07.603336805 +0000 UTC m=+21.726373738 I0427 16:01:07.619532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rt79j" condition "Ready" to 2026-04-27 16:01:07.619519442 +0000 UTC m=+21.742556385 I0427 16:01:07.647038 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:01:07.647021339 +0000 UTC m=+21.770058282 I0427 16:01:07.666516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:01:12.564728 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:01:12.564712842 +0000 UTC m=+26.687749805 I0427 16:01:36.283566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:01:36.283641 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 16:01:36.283622625 +0000 UTC m=+50.406659558 I0427 16:01:36.283743 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 16:01:36.283549866 +0000 UTC m=+50.406586809 I0427 16:01:36.315993 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 16:01:36.315972819 +0000 UTC m=+50.439009752 I0427 16:01:36.339779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:01:36.339889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:01:36.339923 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 16:01:36.339915098 +0000 UTC m=+50.462952031 I0427 16:01:36.586875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4qkfj" condition "Approved" to 2026-04-27 16:01:36.586865764 +0000 UTC m=+50.709902707 I0427 16:01:36.633610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4qkfj" condition "Ready" to 2026-04-27 16:01:36.633583286 +0000 UTC m=+50.756620259 I0427 16:01:36.668884 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:01:36.668863587 +0000 UTC m=+50.791900530 I0427 16:01:36.731679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:06:33.880256 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready" to 2026-04-27 16:06:33.880201734 +0000 UTC m=+348.003238667 I0427 16:06:33.881845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-115.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:06:33.881871 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Issuing" to 2026-04-27 16:06:33.881866916 +0000 UTC m=+348.004903849 I0427 16:06:33.902610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:06:33.902715 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready" to 2026-04-27 16:06:33.902702354 +0000 UTC m=+348.025739317 I0427 16:06:34.157762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:06:34.195347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-115.nip.io-tls-fjw89" condition "Approved" to 2026-04-27 16:06:34.195323419 +0000 UTC m=+348.318360392 I0427 16:06:34.234986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-115.nip.io-tls-fjw89" condition "Ready" to 2026-04-27 16:06:34.234969083 +0000 UTC m=+348.358006016 I0427 16:06:34.272911 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:06:34.272894584 +0000 UTC m=+348.395931527 I0427 16:06:34.300878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:06:34.301427 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:06:34.301419276 +0000 UTC m=+348.424456229 I0427 16:06:34.324667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:06:34.324984 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:06:34.324976284 +0000 UTC m=+348.448013217 I0427 16:07:37.347522 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 16:07:37.347480506 +0000 UTC m=+411.470517489 I0427 16:07:37.347561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:07:37.347616 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 16:07:37.347612205 +0000 UTC m=+411.470649148 E0427 16:07:37.365556 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:07:37.365617 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 16:07:37.365605331 +0000 UTC m=+411.488642304 E0427 16:07:37.365706 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:07:37.369024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:07:37.369092 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 16:07:37.369084477 +0000 UTC m=+411.492121420 E0427 16:07:37.384351 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 16:07:37.384837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:07:37.384970 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 16:07:37.384942854 +0000 UTC m=+411.507979787 E0427 16:07:37.385354 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:07:37.385404 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:07:37.385474 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 16:07:37.386930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dk248" condition "Approved" to 2026-04-27 16:07:37.386922075 +0000 UTC m=+411.509959008 I0427 16:07:37.401757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dk248" condition "Ready" to 2026-04-27 16:07:37.401746851 +0000 UTC m=+411.524783794 I0427 16:07:37.424528 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:07:37.424515251 +0000 UTC m=+411.547552194 I0427 16:07:37.449033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:07:37.449314 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:07:37.449307252 +0000 UTC m=+411.572344185 I0427 16:07:37.472703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:07:37.472959 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:07:37.472949353 +0000 UTC m=+411.595986296 I0427 16:07:42.385507 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:07:42.385488236 +0000 UTC m=+416.508525189 I0427 16:08:31.065070 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 16:08:31.062534691 +0000 UTC m=+465.185571624 I0427 16:08:31.065486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:31.065510 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 16:08:31.065506376 +0000 UTC m=+465.188543309 I0427 16:08:31.096537 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 16:08:31.096523556 +0000 UTC m=+465.219560499 I0427 16:08:31.102611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:31.102653 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 16:08:31.102645672 +0000 UTC m=+465.225682595 I0427 16:08:31.103086 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 16:08:31.103080841 +0000 UTC m=+465.226117774 I0427 16:08:31.103305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:31.103325 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 16:08:31.103321635 +0000 UTC m=+465.226358568 I0427 16:08:31.142969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:31.143140 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 16:08:31.143131483 +0000 UTC m=+465.266168436 I0427 16:08:31.158438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:31.158484 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 16:08:31.158478397 +0000 UTC m=+465.281515330 I0427 16:08:31.161490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:31.161640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:31.161712 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 16:08:31.161662806 +0000 UTC m=+465.284699739 I0427 16:08:31.330376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:31.358429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:31.372854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fmtgs" condition "Approved" to 2026-04-27 16:08:31.372840693 +0000 UTC m=+465.495877636 I0427 16:08:31.374178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4knt5" condition "Approved" to 2026-04-27 16:08:31.37416703 +0000 UTC m=+465.497203963 I0427 16:08:31.424628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4knt5" condition "Ready" to 2026-04-27 16:08:31.4246189 +0000 UTC m=+465.547655833 I0427 16:08:31.425205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fmtgs" condition "Ready" to 2026-04-27 16:08:31.425198765 +0000 UTC m=+465.548235698 I0427 16:08:31.459202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:31.471472 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:31.471460351 +0000 UTC m=+465.594497284 I0427 16:08:31.490701 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:31.490690918 +0000 UTC m=+465.613727851 I0427 16:08:31.498940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:31.499165 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:31.499159875 +0000 UTC m=+465.622196808 I0427 16:08:31.508828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s9gzd" condition "Approved" to 2026-04-27 16:08:31.508816752 +0000 UTC m=+465.631853705 I0427 16:08:31.518480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:31.518818 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:31.518799581 +0000 UTC m=+465.641836514 I0427 16:08:31.777100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s9gzd" condition "Ready" to 2026-04-27 16:08:31.77708528 +0000 UTC m=+465.900122233 I0427 16:08:32.155898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:32.253754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:32.607660 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:32.607646433 +0000 UTC m=+466.730683366 I0427 16:08:32.655916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:32.842645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:32.842986 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:32.842976638 +0000 UTC m=+466.966013581 I0427 16:08:33.004884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:54.925154 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls" condition "Ready" to 2026-04-27 16:08:54.925139481 +0000 UTC m=+489.048176424 I0427 16:08:54.925237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:54.925289 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls" condition "Issuing" to 2026-04-27 16:08:54.925280256 +0000 UTC m=+489.048317199 I0427 16:08:54.972555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:54.972679 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls" condition "Ready" to 2026-04-27 16:08:54.972669924 +0000 UTC m=+489.095706877 I0427 16:08:55.116407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:55.154131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sk5ch-4vzbv" condition "Approved" to 2026-04-27 16:08:55.154120409 +0000 UTC m=+489.277157352 I0427 16:08:55.193697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sk5ch-4vzbv" condition "Ready" to 2026-04-27 16:08:55.193686074 +0000 UTC m=+489.316723007 I0427 16:08:55.235307 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:55.235294358 +0000 UTC m=+489.358331291 I0427 16:08:55.256216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:55.364057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sk5ch-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:21.506012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:21.506077 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 16:09:21.506049022 +0000 UTC m=+515.629085955 I0427 16:09:21.506137 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 16:09:21.506096431 +0000 UTC m=+515.629133374 I0427 16:09:21.529063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:21.529217 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 16:09:21.529207769 +0000 UTC m=+515.652244722 I0427 16:09:21.744122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:21.796955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fkghk" condition "Approved" to 2026-04-27 16:09:21.796937569 +0000 UTC m=+515.919974532 I0427 16:09:21.827515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fkghk" condition "Ready" to 2026-04-27 16:09:21.82718918 +0000 UTC m=+515.950226153 I0427 16:09:21.901295 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:21.900894972 +0000 UTC m=+516.023931905 I0427 16:09:22.089412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:22.090008 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:22.090001528 +0000 UTC m=+516.213038461 I0427 16:09:22.170340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:15.983327 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 16:12:15.983307128 +0000 UTC m=+690.106344061 I0427 16:12:15.983793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:12:15.983813 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 16:12:15.983810143 +0000 UTC m=+690.106847076 I0427 16:12:16.009126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:16.009437 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:12:16.009470 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 16:12:16.009462273 +0000 UTC m=+690.132499216 I0427 16:12:16.271805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:16.285035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xzvl7" condition "Approved" to 2026-04-27 16:12:16.285014699 +0000 UTC m=+690.408051642 I0427 16:12:16.319389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xzvl7" condition "Ready" to 2026-04-27 16:12:16.319376328 +0000 UTC m=+690.442413261 I0427 16:12:16.363664 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:12:16.363642206 +0000 UTC m=+690.486679149 I0427 16:12:16.400697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:16.401263 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:12:16.401254474 +0000 UTC m=+690.524291417 I0427 16:12:16.408651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:16.431416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:59.107091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:12:59.107136 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 16:12:59.107125046 +0000 UTC m=+733.230161989 I0427 16:12:59.107998 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 16:12:59.106217117 +0000 UTC m=+733.229254060 I0427 16:12:59.138820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:59.139463 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 16:12:59.139454673 +0000 UTC m=+733.262491606 I0427 16:12:59.316214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:59.354515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-95ztr" condition "Approved" to 2026-04-27 16:12:59.354500745 +0000 UTC m=+733.477537688 I0427 16:12:59.385931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-95ztr" condition "Ready" to 2026-04-27 16:12:59.385915589 +0000 UTC m=+733.508952522 I0427 16:12:59.417929 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:12:59.417912896 +0000 UTC m=+733.540949829 I0427 16:12:59.441772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"