I0407 01:21:04.183259 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 01:21:04.183322 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 01:21:04.183366 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 01:21:04.186820 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 01:21:04.187619 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 01:21:04.187638 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 01:21:04.187715 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 01:21:04.191659 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 01:21:04.206405 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 01:21:04.211445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 01:21:04.214101 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 01:21:04.214155 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 01:21:04.217171 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 01:21:04.217441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 01:21:04.222091 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 01:21:04.225794 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 01:21:04.228023 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 01:21:04.229623 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 01:21:04.229647 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 01:21:04.229673 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 01:21:04.232078 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 01:21:04.234876 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 01:21:04.240153 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 01:21:04.240194 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 01:21:04.240202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 01:21:04.243462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 01:21:04.245092 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 01:21:04.246789 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 01:21:04.248425 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 01:21:04.250322 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 01:21:04.252056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 01:21:04.254280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 01:21:04.256868 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 01:21:04.262457 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:21:04.262460 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:21:04.262838 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:21:04.263336 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:21:04.263848 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:21:04.264162 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:21:04.264936 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:21:04.265451 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:21:04.266401 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:21:04.345595 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:21:20.022751 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 01:21:20.022722043 +0000 UTC m=+15.872288627 I0407 01:21:20.783016 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 01:21:20.78300055 +0000 UTC m=+16.632567124 I0407 01:21:20.783481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:21:20.783574 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 01:21:20.783540748 +0000 UTC m=+16.633107322 I0407 01:21:20.799027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:21:20.799090 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:21:20.799122 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 01:21:20.799115598 +0000 UTC m=+16.648682152 E0407 01:21:20.799342 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:21:20.799512 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 01:21:20.799504761 +0000 UTC m=+16.649071315 E0407 01:21:20.799641 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:21:20.810141 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 01:21:20.810899 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:21:20.810934 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:21:20.810989 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 01:21:20.839097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-p5kzz" condition "Approved" to 2026-04-07 01:21:20.839079693 +0000 UTC m=+16.688646267 I0407 01:21:20.858096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-p5kzz" condition "Ready" to 2026-04-07 01:21:20.858081647 +0000 UTC m=+16.707648201 I0407 01:21:20.890500 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:21:20.890486919 +0000 UTC m=+16.740053473 I0407 01:21:20.908841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:21:25.811540 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:21:25.811511617 +0000 UTC m=+21.661078191 I0407 01:21:47.855799 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:21:47.855906 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 01:21:47.855882658 +0000 UTC m=+43.705449252 I0407 01:21:47.856188 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 01:21:47.856180256 +0000 UTC m=+43.705746830 I0407 01:21:47.864820 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 01:21:47.86480837 +0000 UTC m=+43.714374914 I0407 01:21:47.887676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:21:47.887722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:21:47.887734 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 01:21:47.887729578 +0000 UTC m=+43.737296122 I0407 01:21:48.075485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:21:48.085167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-f5lgd" condition "Approved" to 2026-04-07 01:21:48.085154501 +0000 UTC m=+43.934721055 I0407 01:21:48.157519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-f5lgd" condition "Ready" to 2026-04-07 01:21:48.157508556 +0000 UTC m=+44.007075110 I0407 01:21:48.199475 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:21:48.199425044 +0000 UTC m=+44.048991608 I0407 01:21:48.218988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:21:48.263568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:25:59.823252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-156.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:25:59.823306 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Issuing" to 2026-04-07 01:25:59.823298728 +0000 UTC m=+295.672865292 I0407 01:25:59.823279 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-04-07 01:25:59.823252676 +0000 UTC m=+295.672819230 I0407 01:25:59.840517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:25:59.840584 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-04-07 01:25:59.840577482 +0000 UTC m=+295.690144026 I0407 01:25:59.992984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:26:00.019169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-69r6j" condition "Approved" to 2026-04-07 01:26:00.019159215 +0000 UTC m=+295.868725759 I0407 01:26:00.045806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-69r6j" condition "Ready" to 2026-04-07 01:26:00.04579416 +0000 UTC m=+295.895360714 I0407 01:26:00.079069 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:26:00.07905879 +0000 UTC m=+295.928625344 I0407 01:26:00.101708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:03.668592 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 01:27:03.668575877 +0000 UTC m=+359.518142431 I0407 01:27:03.668764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:03.668802 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 01:27:03.668793082 +0000 UTC m=+359.518359646 E0407 01:27:03.684428 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:27:03.684461 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 01:27:03.684453997 +0000 UTC m=+359.534020541 E0407 01:27:03.684498 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:27:03.692844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:03.692913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:03.692934 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 01:27:03.692928606 +0000 UTC m=+359.542495160 E0407 01:27:03.693106 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 01:27:03.693167 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:27:03.693191 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:27:03.693217 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 01:27:03.726001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8gpt7" condition "Approved" to 2026-04-07 01:27:03.725990148 +0000 UTC m=+359.575556702 I0407 01:27:03.738981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8gpt7" condition "Ready" to 2026-04-07 01:27:03.738970227 +0000 UTC m=+359.588536781 I0407 01:27:03.761545 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:03.761533062 +0000 UTC m=+359.611099606 I0407 01:27:03.777487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:03.778286 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:03.778274683 +0000 UTC m=+359.627841257 I0407 01:27:03.793895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:03.795341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:08.694570 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:08.694554364 +0000 UTC m=+364.544120948 I0407 01:27:48.854710 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 01:27:48.854687715 +0000 UTC m=+404.704254279 I0407 01:27:48.863761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:48.863800 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 01:27:48.863793135 +0000 UTC m=+404.713359679 I0407 01:27:48.871385 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:48.871416 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 01:27:48.871410845 +0000 UTC m=+404.720977389 I0407 01:27:48.877838 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 01:27:48.877823679 +0000 UTC m=+404.727390303 I0407 01:27:48.889159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:48.889184 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 01:27:48.889179126 +0000 UTC m=+404.738745670 I0407 01:27:48.889480 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 01:27:48.889476483 +0000 UTC m=+404.739043027 I0407 01:27:48.912806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:48.912866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:48.912883 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 01:27:48.912877802 +0000 UTC m=+404.762444356 I0407 01:27:48.918729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:48.918794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:48.918818 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 01:27:48.918811926 +0000 UTC m=+404.768378490 I0407 01:27:48.923876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:48.923942 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 01:27:48.923936164 +0000 UTC m=+404.773502708 I0407 01:27:49.049241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:49.056035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n2vsb" condition "Approved" to 2026-04-07 01:27:49.056025344 +0000 UTC m=+404.905591898 I0407 01:27:49.077022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n2vsb" condition "Ready" to 2026-04-07 01:27:49.077011791 +0000 UTC m=+404.926578345 I0407 01:27:49.104582 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:49.104571866 +0000 UTC m=+404.954138430 I0407 01:27:49.123760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:49.123992 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:49.12398741 +0000 UTC m=+404.973553954 I0407 01:27:49.144975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xq8tm" condition "Approved" to 2026-04-07 01:27:49.144962588 +0000 UTC m=+404.994529132 I0407 01:27:49.162698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0407 01:27:49.165589 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-4zpqz\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0407 01:27:49.171052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xq8tm" condition "Ready" to 2026-04-07 01:27:49.171037982 +0000 UTC m=+405.020604536 I0407 01:27:49.208604 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:49.208591955 +0000 UTC m=+405.058158509 I0407 01:27:49.299533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:49.299962 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:49.29994004 +0000 UTC m=+405.149506604 I0407 01:27:49.546433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:49.649667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:49.903869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-b59c4" condition "Approved" to 2026-04-07 01:27:49.903856663 +0000 UTC m=+405.753423197 I0407 01:27:50.210423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-b59c4" condition "Ready" to 2026-04-07 01:27:50.210412252 +0000 UTC m=+406.059978806 I0407 01:27:50.450846 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:50.450829508 +0000 UTC m=+406.300396082 I0407 01:27:50.547254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:50.547904 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:50.547892116 +0000 UTC m=+406.397458700 I0407 01:27:50.749263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:04.267939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:28:04.267972 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls" condition "Issuing" to 2026-04-07 01:28:04.267959544 +0000 UTC m=+420.117526088 I0407 01:28:04.268337 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls" condition "Ready" to 2026-04-07 01:28:04.268332851 +0000 UTC m=+420.117899395 I0407 01:28:04.285594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:04.285697 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls" condition "Ready" to 2026-04-07 01:28:04.285689667 +0000 UTC m=+420.135256221 I0407 01:28:05.101934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:05.284721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ctcg4-cg6q5" condition "Approved" to 2026-04-07 01:28:05.284710159 +0000 UTC m=+421.134276703 I0407 01:28:05.430671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ctcg4-cg6q5" condition "Ready" to 2026-04-07 01:28:05.430660214 +0000 UTC m=+421.280226768 I0407 01:28:05.572438 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:05.572421336 +0000 UTC m=+421.421987900 I0407 01:28:05.596859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:05.597127 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:05.597121477 +0000 UTC m=+421.446688011 I0407 01:28:05.622121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ctcg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:10.248029 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:28:10.248062 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 01:28:10.248054998 +0000 UTC m=+426.097621532 I0407 01:28:10.247757 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 01:28:10.247727982 +0000 UTC m=+426.097294536 I0407 01:28:10.262859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:10.262913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:28:10.262928 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 01:28:10.262923109 +0000 UTC m=+426.112489653 I0407 01:28:10.416024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:10.419425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sz29r" condition "Approved" to 2026-04-07 01:28:10.419409348 +0000 UTC m=+426.268975932 I0407 01:28:10.439731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sz29r" condition "Ready" to 2026-04-07 01:28:10.439719515 +0000 UTC m=+426.289286059 I0407 01:28:10.465303 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:10.465291615 +0000 UTC m=+426.314858159 I0407 01:28:10.491509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:10.491814 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:10.491807463 +0000 UTC m=+426.341373997 I0407 01:28:10.506058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:28:10.506279 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:28:10.506271166 +0000 UTC m=+426.355837700 I0407 01:28:10.506501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:31:32.738638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:31:32.738676 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 01:31:32.738659808 +0000 UTC m=+628.588226352 I0407 01:31:32.739005 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 01:31:32.739000573 +0000 UTC m=+628.588567127 I0407 01:31:32.753448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:31:32.753569 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 01:31:32.753559413 +0000 UTC m=+628.603126217 I0407 01:31:32.990347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:31:33.020440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-55zx6" condition "Approved" to 2026-04-07 01:31:33.020431743 +0000 UTC m=+628.869998287 I0407 01:31:33.040368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-55zx6" condition "Ready" to 2026-04-07 01:31:33.040358457 +0000 UTC m=+628.889925001 I0407 01:31:33.081670 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:31:33.081659835 +0000 UTC m=+628.931226379 I0407 01:31:33.111244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:14.025741 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 01:32:14.025721626 +0000 UTC m=+669.875288200 I0407 01:32:14.026247 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:32:14.026350 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 01:32:14.026343244 +0000 UTC m=+669.875909818 I0407 01:32:14.055247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:14.055412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:32:14.055439 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 01:32:14.055431072 +0000 UTC m=+669.904997646 I0407 01:32:14.258457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:14.266914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9qmwr" condition "Approved" to 2026-04-07 01:32:14.266905272 +0000 UTC m=+670.116471806 I0407 01:32:14.284216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9qmwr" condition "Ready" to 2026-04-07 01:32:14.284206263 +0000 UTC m=+670.133772817 I0407 01:32:14.317339 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:32:14.317322324 +0000 UTC m=+670.166888898 I0407 01:32:14.332507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:14.333049 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:32:14.333043594 +0000 UTC m=+670.182610138 I0407 01:32:14.349210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:14.355356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"