I0420 08:06:39.858794 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 08:06:39.859017 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 08:06:39.859154 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 08:06:39.864608 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 08:06:39.865318 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 08:06:39.865332 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 08:06:39.865432 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 08:06:39.871751 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 08:06:39.887832 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 08:06:39.891113 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 08:06:39.891408 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 08:06:39.894646 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 08:06:39.897838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 08:06:39.903283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 08:06:39.906355 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 08:06:39.906385 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 08:06:39.906387 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 08:06:39.908975 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 08:06:39.911518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 08:06:39.914096 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 08:06:39.916073 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 08:06:39.916118 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 08:06:39.917977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 08:06:39.920010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 08:06:39.925843 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 08:06:39.927733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 08:06:39.929699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 08:06:39.931339 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 08:06:39.933315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 08:06:39.935113 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 08:06:39.936783 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 08:06:39.936807 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 08:06:39.937431 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 08:06:39.940033 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:39.943154 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:39.944081 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:39.944841 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:39.945156 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:39.945854 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:39.945898 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:39.946071 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:39.947003 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:40.033985 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:54.021959 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 08:06:54.021937871 +0000 UTC m=+14.194973243 I0420 08:06:54.740939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:06:54.741011 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 08:06:54.741001496 +0000 UTC m=+14.914036878 I0420 08:06:54.742093 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 08:06:54.742084553 +0000 UTC m=+14.915119925 E0420 08:06:54.757472 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:06:54.757532 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 08:06:54.757525636 +0000 UTC m=+14.930560978 E0420 08:06:54.757586 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:06:54.760777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:06:54.760869 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 08:06:54.760862036 +0000 UTC m=+14.933897388 E0420 08:06:54.774369 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 08:06:54.774502 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:06:54.774546 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:06:54.774601 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 08:06:54.778825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:06:54.778916 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 08:06:54.778904389 +0000 UTC m=+14.951939741 I0420 08:06:54.779477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:06:54.786217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-928cq" condition "Approved" to 2026-04-20 08:06:54.786201499 +0000 UTC m=+14.959236851 I0420 08:06:54.793995 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 08:06:54.793982197 +0000 UTC m=+14.967017549 I0420 08:06:54.801091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-928cq" condition "Ready" to 2026-04-20 08:06:54.801082105 +0000 UTC m=+14.974117457 I0420 08:06:54.802792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:06:54.822675 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:06:54.822660671 +0000 UTC m=+14.995696013 I0420 08:06:54.841225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:06:59.774843 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:06:59.774826156 +0000 UTC m=+19.947861498 I0420 08:07:20.370251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:07:20.370708 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 08:07:20.370363564 +0000 UTC m=+40.543398936 I0420 08:07:20.370708 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 08:07:20.370690859 +0000 UTC m=+40.543726211 I0420 08:07:20.387204 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 08:07:20.387191356 +0000 UTC m=+40.560226708 I0420 08:07:20.391641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:07:20.391839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:07:20.391919 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 08:07:20.391908849 +0000 UTC m=+40.564944201 I0420 08:07:20.560142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x95s9" condition "Approved" to 2026-04-20 08:07:20.560129122 +0000 UTC m=+40.733164504 I0420 08:07:20.598269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x95s9" condition "Ready" to 2026-04-20 08:07:20.598256713 +0000 UTC m=+40.771292065 I0420 08:07:20.627775 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:07:20.627763331 +0000 UTC m=+40.800798673 I0420 08:07:20.649706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:07:20.649989 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:07:20.649982754 +0000 UTC m=+40.823018106 I0420 08:07:20.676627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:11:43.450193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-206.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:11:43.450234 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-206.nip.io-tls" condition "Issuing" to 2026-04-20 08:11:43.450224468 +0000 UTC m=+303.623259850 I0420 08:11:43.450854 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-206.nip.io-tls" condition "Ready" to 2026-04-20 08:11:43.45084498 +0000 UTC m=+303.623880362 I0420 08:11:43.470355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:11:43.470472 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-206.nip.io-tls" condition "Ready" to 2026-04-20 08:11:43.470464087 +0000 UTC m=+303.643499439 I0420 08:11:43.607224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:11:43.640212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-206.nip.io-tls-5h49d" condition "Approved" to 2026-04-20 08:11:43.64019585 +0000 UTC m=+303.813231232 I0420 08:11:43.670965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-206.nip.io-tls-5h49d" condition "Ready" to 2026-04-20 08:11:43.670948976 +0000 UTC m=+303.843984328 I0420 08:11:43.700107 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-206.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:11:43.700091882 +0000 UTC m=+303.873127254 I0420 08:11:43.720716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:11:43.721036 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-206.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:11:43.721026484 +0000 UTC m=+303.894061836 I0420 08:11:43.750186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:12:48.535695 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 08:12:48.535677488 +0000 UTC m=+368.708712840 I0420 08:12:48.535799 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:12:48.535841 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 08:12:48.53583257 +0000 UTC m=+368.708867922 E0420 08:12:48.548753 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:12:48.548791 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 08:12:48.548783846 +0000 UTC m=+368.721819198 E0420 08:12:48.548841 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:12:48.552304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:12:48.552380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:12:48.552411 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 08:12:48.552405473 +0000 UTC m=+368.725440835 E0420 08:12:48.558657 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 08:12:48.558844 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:12:48.558912 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:12:48.559007 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 08:12:48.589864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hppf2" condition "Approved" to 2026-04-20 08:12:48.589851078 +0000 UTC m=+368.762886430 I0420 08:12:48.602580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hppf2" condition "Ready" to 2026-04-20 08:12:48.60257058 +0000 UTC m=+368.775605932 I0420 08:12:48.622411 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:12:48.622389384 +0000 UTC m=+368.795424726 I0420 08:12:48.639132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:12:48.639433 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:12:48.639424535 +0000 UTC m=+368.812459887 I0420 08:12:48.645801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:12:48.658139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:12:53.560069 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:12:53.560054182 +0000 UTC m=+373.733089554 I0420 08:13:34.016649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:34.016675 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 08:13:34.016670292 +0000 UTC m=+414.189705634 I0420 08:13:34.016701 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 08:13:34.016695272 +0000 UTC m=+414.189730614 I0420 08:13:34.063952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:34.063979 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 08:13:34.063967331 +0000 UTC m=+414.237002673 I0420 08:13:34.064167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:34.064183 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 08:13:34.064179834 +0000 UTC m=+414.237215176 I0420 08:13:34.063983 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 08:13:34.063976401 +0000 UTC m=+414.237011743 I0420 08:13:34.064493 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 08:13:34.064488199 +0000 UTC m=+414.237523541 I0420 08:13:34.075440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:34.075518 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 08:13:34.07551067 +0000 UTC m=+414.248546012 I0420 08:13:34.108902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:34.108960 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 08:13:34.108955267 +0000 UTC m=+414.281990609 I0420 08:13:34.109313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:34.109496 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 08:13:34.109467734 +0000 UTC m=+414.282503086 I0420 08:13:34.282208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:34.344228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f222c" condition "Approved" to 2026-04-20 08:13:34.344211775 +0000 UTC m=+414.517247127 I0420 08:13:34.430451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f222c" condition "Ready" to 2026-04-20 08:13:34.430436731 +0000 UTC m=+414.603472063 I0420 08:13:34.488753 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:34.488744231 +0000 UTC m=+414.661779573 I0420 08:13:34.521116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:34.530384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:34.573888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kqgjk" condition "Approved" to 2026-04-20 08:13:34.573875532 +0000 UTC m=+414.746910874 E0420 08:13:34.602235 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-lswln\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0420 08:13:34.603290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:34.611615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kqgjk" condition "Ready" to 2026-04-20 08:13:34.611605862 +0000 UTC m=+414.784641204 I0420 08:13:34.659012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tmvtq" condition "Approved" to 2026-04-20 08:13:34.65676065 +0000 UTC m=+414.829796002 I0420 08:13:34.667041 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:34.667029659 +0000 UTC m=+414.840065001 I0420 08:13:35.041208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tmvtq" condition "Ready" to 2026-04-20 08:13:35.041194141 +0000 UTC m=+415.214229493 I0420 08:13:35.113433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:35.114086 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:35.114076531 +0000 UTC m=+415.287111913 I0420 08:13:35.487259 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:35.487237901 +0000 UTC m=+415.660273273 I0420 08:13:35.507371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:35.609578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:35.610281 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:35.610269991 +0000 UTC m=+415.783305373 I0420 08:13:35.863444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:45.546792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jngwk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:45.546828 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jngwk-tls" condition "Issuing" to 2026-04-20 08:13:45.546819794 +0000 UTC m=+425.719855146 I0420 08:13:45.547242 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jngwk-tls" condition "Ready" to 2026-04-20 08:13:45.54723456 +0000 UTC m=+425.720269912 I0420 08:13:45.566019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jngwk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jngwk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:45.566218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jngwk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:45.566251 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jngwk-tls" condition "Issuing" to 2026-04-20 08:13:45.566245443 +0000 UTC m=+425.739280775 I0420 08:13:45.923477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jngwk-ww69v" condition "Approved" to 2026-04-20 08:13:45.923466469 +0000 UTC m=+426.096501821 I0420 08:13:45.944280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jngwk-ww69v" condition "Ready" to 2026-04-20 08:13:45.944268338 +0000 UTC m=+426.117303690 I0420 08:13:45.988865 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jngwk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:45.988854295 +0000 UTC m=+426.161889647 I0420 08:13:46.058978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jngwk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jngwk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:46.192650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jngwk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jngwk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:57.641761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:57.641795 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 08:13:57.641788337 +0000 UTC m=+437.814823689 I0420 08:13:57.641880 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 08:13:57.641854628 +0000 UTC m=+437.814889970 I0420 08:13:57.666393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:57.666762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:57.666839 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 08:13:57.666793429 +0000 UTC m=+437.839828781 I0420 08:13:57.879837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-67vc7" condition "Approved" to 2026-04-20 08:13:57.879826548 +0000 UTC m=+438.052861890 I0420 08:13:57.923654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-67vc7" condition "Ready" to 2026-04-20 08:13:57.923641455 +0000 UTC m=+438.096676797 I0420 08:13:57.975279 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:57.975245611 +0000 UTC m=+438.148280953 I0420 08:13:58.007411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:58.008072 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:58.008063494 +0000 UTC m=+438.181098846 I0420 08:13:58.027465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:17.795701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:17:17.795816 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 08:17:17.795805631 +0000 UTC m=+637.968841023 I0420 08:17:17.796042 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 08:17:17.796033374 +0000 UTC m=+637.969068746 I0420 08:17:17.815706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:17.815802 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 08:17:17.815767842 +0000 UTC m=+637.988803194 I0420 08:17:17.978332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:18.008200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-596zb" condition "Approved" to 2026-04-20 08:17:18.008179778 +0000 UTC m=+638.181215210 I0420 08:17:18.036303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-596zb" condition "Ready" to 2026-04-20 08:17:18.036295898 +0000 UTC m=+638.209331240 I0420 08:17:18.063576 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:17:18.063559988 +0000 UTC m=+638.236595340 I0420 08:17:18.088190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:18.088542 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:17:18.0885336 +0000 UTC m=+638.261568952 I0420 08:17:18.108941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:57.923984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:17:57.924246 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 08:17:57.924240605 +0000 UTC m=+678.097275947 I0420 08:17:57.924054 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 08:17:57.924045993 +0000 UTC m=+678.097081355 I0420 08:17:57.945581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:57.945818 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 08:17:57.945809993 +0000 UTC m=+678.118845345 I0420 08:17:58.096033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:58.142939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6g6mk" condition "Approved" to 2026-04-20 08:17:58.142928767 +0000 UTC m=+678.315964119 I0420 08:17:58.162746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6g6mk" condition "Ready" to 2026-04-20 08:17:58.162737775 +0000 UTC m=+678.335773117 I0420 08:17:58.203712 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:17:58.203699274 +0000 UTC m=+678.376734636 I0420 08:17:58.225254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:58.225782 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:17:58.225774098 +0000 UTC m=+678.398809460 I0420 08:17:58.242069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"