I0427 16:02:24.845507 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 16:02:24.845675 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 16:02:24.845760 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 16:02:24.851559 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 16:02:24.852107 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 16:02:24.852217 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 16:02:24.852330 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 16:02:24.855834 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 16:02:24.870332 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 16:02:24.874898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 16:02:24.878649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 16:02:24.887405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 16:02:24.887605 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 16:02:24.889767 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 16:02:24.891584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 16:02:24.893583 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 16:02:24.895490 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 16:02:24.899996 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 16:02:24.900024 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 16:02:24.900035 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 16:02:24.900114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 16:02:24.903282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 16:02:24.905830 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 16:02:24.905948 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 16:02:24.908794 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 16:02:24.910929 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 16:02:24.912712 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 16:02:24.912731 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 16:02:24.912811 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 16:02:24.915315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 16:02:24.917605 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 16:02:24.921394 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 16:02:24.925411 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 16:02:24.927980 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:24.928048 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:24.928443 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:24.928554 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:24.946661 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:24.961263 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:24.976889 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:24.991125 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:25.013537 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:25.033892 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 16:02:36.392367 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 16:02:36.392351625 +0000 UTC m=+11.588537481 I0427 16:02:37.199411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:02:37.199498 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 16:02:37.199482739 +0000 UTC m=+12.395668595 I0427 16:02:37.199535 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 16:02:37.199501139 +0000 UTC m=+12.395686975 E0427 16:02:37.217832 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:02:37.218110 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 16:02:37.218099228 +0000 UTC m=+12.414285064 E0427 16:02:37.218302 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:02:37.220575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:37.220750 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:02:37.220813 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 16:02:37.220801985 +0000 UTC m=+12.416987831 E0427 16:02:37.231875 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 16:02:37.232533 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:02:37.232703 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:02:37.232766 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 16:02:37.276378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-n5rcs" condition "Approved" to 2026-04-27 16:02:37.276365304 +0000 UTC m=+12.472551130 I0427 16:02:37.291261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-n5rcs" condition "Ready" to 2026-04-27 16:02:37.291250373 +0000 UTC m=+12.487436199 I0427 16:02:37.313547 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:02:37.3135373 +0000 UTC m=+12.509723116 I0427 16:02:37.329882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:37.330096 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:02:37.330091883 +0000 UTC m=+12.526277709 I0427 16:02:37.348063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:02:37.348322 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:02:37.34831523 +0000 UTC m=+12.544501076 I0427 16:02:42.233439 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:02:42.233389237 +0000 UTC m=+17.429575073 I0427 16:03:04.343860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:03:04.344004 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 16:03:04.343911803 +0000 UTC m=+39.540097619 I0427 16:03:04.344352 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 16:03:04.344337626 +0000 UTC m=+39.540523482 I0427 16:03:04.356066 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 16:03:04.356050324 +0000 UTC m=+39.552236180 I0427 16:03:04.394703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:03:04.394911 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 16:03:04.39490254 +0000 UTC m=+39.591088376 I0427 16:03:04.642706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:03:04.685251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d8gql" condition "Approved" to 2026-04-27 16:03:04.685126992 +0000 UTC m=+39.881312848 I0427 16:03:04.733137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d8gql" condition "Ready" to 2026-04-27 16:03:04.733128945 +0000 UTC m=+39.929314771 I0427 16:03:04.766746 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:03:04.766718947 +0000 UTC m=+39.962904783 I0427 16:03:04.796098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:03:04.796474 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:03:04.796467319 +0000 UTC m=+39.992653155 I0427 16:03:04.813543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:03:04.815292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:03:04.815710 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:03:04.815687582 +0000 UTC m=+40.011873418 I0427 16:07:20.231776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-3.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:07:20.232646 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-3.nip.io-tls" condition "Ready" to 2026-04-27 16:07:20.232632485 +0000 UTC m=+295.428818361 I0427 16:07:20.233438 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-3.nip.io-tls" condition "Issuing" to 2026-04-27 16:07:20.231853524 +0000 UTC m=+295.428039390 I0427 16:07:20.264756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:07:20.264968 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-3.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:07:20.264991 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-3.nip.io-tls" condition "Issuing" to 2026-04-27 16:07:20.264985254 +0000 UTC m=+295.461171080 I0427 16:07:20.427671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:07:20.436480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-3.nip.io-tls-pvw8k" condition "Approved" to 2026-04-27 16:07:20.436468421 +0000 UTC m=+295.632654277 I0427 16:07:20.468595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-3.nip.io-tls-pvw8k" condition "Ready" to 2026-04-27 16:07:20.468580632 +0000 UTC m=+295.664766498 I0427 16:07:20.499654 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-3.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:07:20.499635928 +0000 UTC m=+295.695821764 I0427 16:07:20.522500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:07:20.522847 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-3.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:07:20.522838176 +0000 UTC m=+295.719024022 I0427 16:07:20.529212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:07:20.541202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:26.687856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:08:26.687884 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 16:08:26.687842204 +0000 UTC m=+361.884028040 I0427 16:08:26.687894 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 16:08:26.68788535 +0000 UTC m=+361.884071186 I0427 16:08:26.706867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:26.706925 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 16:08:26.706918462 +0000 UTC m=+361.903104288 E0427 16:08:26.709568 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 16:08:26.709680 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 16:08:26.709628928 +0000 UTC m=+361.905814754 E0427 16:08:26.709722 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:08:26.719974 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0427 16:08:26.720150 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:08:26.720205 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 16:08:26.720277 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 16:08:26.722436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:26.722553 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 16:08:26.722545544 +0000 UTC m=+361.918731370 I0427 16:08:26.726431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vm5sb" condition "Approved" to 2026-04-27 16:08:26.726419415 +0000 UTC m=+361.922605251 I0427 16:08:26.739606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vm5sb" condition "Ready" to 2026-04-27 16:08:26.739597613 +0000 UTC m=+361.935783439 I0427 16:08:26.763547 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:26.763526294 +0000 UTC m=+361.959712120 I0427 16:08:26.779713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:08:31.721212 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:08:31.721199007 +0000 UTC m=+366.917384863 I0427 16:09:14.363287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:14.363364 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 16:09:14.363315692 +0000 UTC m=+409.559501528 I0427 16:09:14.363782 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 16:09:14.3637758 +0000 UTC m=+409.559961626 I0427 16:09:14.368828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:14.368911 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 16:09:14.368903094 +0000 UTC m=+409.565088920 I0427 16:09:14.369549 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 16:09:14.369543509 +0000 UTC m=+409.565729335 I0427 16:09:14.381594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:14.381625 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 16:09:14.381618771 +0000 UTC m=+409.577804597 I0427 16:09:14.381666 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 16:09:14.381660168 +0000 UTC m=+409.577845994 I0427 16:09:14.429936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:14.430269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:14.431822 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 16:09:14.431813985 +0000 UTC m=+409.627999811 I0427 16:09:14.431286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:14.431938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:14.431963 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 16:09:14.431958665 +0000 UTC m=+409.628144491 I0427 16:09:14.436942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:14.436998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:14.437012 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 16:09:14.437008323 +0000 UTC m=+409.633194149 I0427 16:09:14.651119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9vpst" condition "Approved" to 2026-04-27 16:09:14.651106342 +0000 UTC m=+409.847292168 I0427 16:09:14.677519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2v9k5" condition "Approved" to 2026-04-27 16:09:14.677506478 +0000 UTC m=+409.873692304 I0427 16:09:14.691960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9vpst" condition "Ready" to 2026-04-27 16:09:14.691945204 +0000 UTC m=+409.888131030 I0427 16:09:14.700039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2v9k5" condition "Ready" to 2026-04-27 16:09:14.700027623 +0000 UTC m=+409.896213449 I0427 16:09:14.737127 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:14.737114588 +0000 UTC m=+409.933300424 I0427 16:09:14.744100 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:14.744082423 +0000 UTC m=+409.940268249 I0427 16:09:14.762538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:14.784333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:15.059499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:15.214378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:15.262238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tdhhg" condition "Approved" to 2026-04-27 16:09:15.262227545 +0000 UTC m=+410.458413371 I0427 16:09:15.415401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tdhhg" condition "Ready" to 2026-04-27 16:09:15.415386487 +0000 UTC m=+410.611572333 I0427 16:09:15.837262 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:15.837236286 +0000 UTC m=+411.033422152 I0427 16:09:15.902458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:16.205000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:22.428007 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:22.428049 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" condition "Issuing" to 2026-04-27 16:09:22.428038719 +0000 UTC m=+417.624224575 I0427 16:09:22.428299 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" condition "Ready" to 2026-04-27 16:09:22.428281153 +0000 UTC m=+417.624467019 I0427 16:09:22.441050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-psc5q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:22.441128 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" condition "Ready" to 2026-04-27 16:09:22.441121184 +0000 UTC m=+417.637307020 I0427 16:09:22.572010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-psc5q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:22.607056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-psc5q-tx2b4" condition "Approved" to 2026-04-27 16:09:22.607039609 +0000 UTC m=+417.803225435 I0427 16:09:22.634311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-psc5q-tx2b4" condition "Ready" to 2026-04-27 16:09:22.634295457 +0000 UTC m=+417.830481303 I0427 16:09:22.666641 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:22.666626084 +0000 UTC m=+417.862811930 I0427 16:09:22.685133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-psc5q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:22.685642 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:22.685633762 +0000 UTC m=+417.881819598 I0427 16:09:22.709874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-psc5q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:22.710515 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-psc5q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:22.710503646 +0000 UTC m=+417.906689502 I0427 16:09:33.774777 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 16:09:33.774759337 +0000 UTC m=+428.970945163 I0427 16:09:33.774967 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:09:33.775017 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 16:09:33.775009662 +0000 UTC m=+428.971195488 I0427 16:09:33.796936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:33.797016 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 16:09:33.797005429 +0000 UTC m=+428.993191265 I0427 16:09:34.070645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:09:34.111122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9l6m7" condition "Approved" to 2026-04-27 16:09:34.11110521 +0000 UTC m=+429.307291046 I0427 16:09:34.136151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9l6m7" condition "Ready" to 2026-04-27 16:09:34.136139666 +0000 UTC m=+429.332325492 I0427 16:09:34.176366 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:09:34.176356226 +0000 UTC m=+429.372542062 I0427 16:09:34.210443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:59.113952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:12:59.114017 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 16:12:59.113978255 +0000 UTC m=+634.310164081 I0427 16:12:59.114465 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 16:12:59.11444641 +0000 UTC m=+634.310632266 I0427 16:12:59.133572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:59.133639 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:12:59.133657 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 16:12:59.133653238 +0000 UTC m=+634.329839064 I0427 16:12:59.463853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:59.474135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vswpx" condition "Approved" to 2026-04-27 16:12:59.474124001 +0000 UTC m=+634.670309837 I0427 16:12:59.493287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vswpx" condition "Ready" to 2026-04-27 16:12:59.493277291 +0000 UTC m=+634.689463127 I0427 16:12:59.538021 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:12:59.538007274 +0000 UTC m=+634.734193110 I0427 16:12:59.557187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:12:59.557558 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:12:59.557531869 +0000 UTC m=+634.753717705 I0427 16:12:59.584471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:41.319331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 16:13:41.319433 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 16:13:41.319403022 +0000 UTC m=+676.515588888 I0427 16:13:41.319888 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 16:13:41.319876157 +0000 UTC m=+676.516061993 I0427 16:13:41.336887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:41.336997 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 16:13:41.33698655 +0000 UTC m=+676.533172406 I0427 16:13:41.647448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:41.677656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wmv7g" condition "Approved" to 2026-04-27 16:13:41.677648265 +0000 UTC m=+676.873834091 I0427 16:13:41.708616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wmv7g" condition "Ready" to 2026-04-27 16:13:41.708605344 +0000 UTC m=+676.904791180 I0427 16:13:41.737564 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:13:41.737551335 +0000 UTC m=+676.933737161 I0427 16:13:41.769671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:41.770026 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:13:41.770021449 +0000 UTC m=+676.966207285 I0427 16:13:41.776749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 16:13:41.777025 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 16:13:41.777018016 +0000 UTC m=+676.973203832 I0427 16:13:41.777651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"