I0409 05:54:38.806921 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 05:54:38.807049 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 05:54:38.807122 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 05:54:38.812310 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 05:54:38.812689 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 05:54:38.812838 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 05:54:38.812849 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 05:54:38.815077 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 05:54:38.829073 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 05:54:38.835473 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 05:54:38.838555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 05:54:38.843595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 05:54:38.848189 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 05:54:38.848224 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 05:54:38.848447 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 05:54:38.851046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 05:54:38.853588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 05:54:38.855831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 05:54:38.857969 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 05:54:38.857988 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 05:54:38.858185 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 05:54:38.865278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 05:54:38.865454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 05:54:38.871079 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 05:54:38.875957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 05:54:38.878143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 05:54:38.880232 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 05:54:38.880262 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 05:54:38.882175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 05:54:38.884134 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 05:54:38.884259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 05:54:38.886171 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 05:54:38.889228 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 05:54:38.892388 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 05:54:38.893183 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 05:54:38.893194 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 05:54:38.915551 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 05:54:38.936137 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 05:54:38.992679 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 05:54:39.000289 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 05:54:39.008401 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 05:54:39.029043 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 05:54:39.045187 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 05:54:51.124686 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 05:54:51.124670916 +0000 UTC m=+12.353217401 I0409 05:54:51.800016 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 05:54:51.800005704 +0000 UTC m=+13.028552189 I0409 05:54:51.800582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 05:54:51.800600 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 05:54:51.800597543 +0000 UTC m=+13.029144028 E0409 05:54:51.818815 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 05:54:51.819222 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 05:54:51.81921015 +0000 UTC m=+13.047756675 E0409 05:54:51.819361 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 05:54:51.822910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:54:51.822967 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 05:54:51.822960352 +0000 UTC m=+13.051506847 E0409 05:54:51.837285 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 05:54:51.837492 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 05:54:51.837544 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 05:54:51.837583 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 05:54:51.842555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:54:51.859571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k8qzw" condition "Approved" to 2026-04-09 05:54:51.859560717 +0000 UTC m=+13.088107212 I0409 05:54:51.872259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k8qzw" condition "Ready" to 2026-04-09 05:54:51.872250552 +0000 UTC m=+13.100797027 I0409 05:54:51.891654 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 05:54:51.89163883 +0000 UTC m=+13.120185315 I0409 05:54:51.909913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:54:56.838634 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 05:54:56.838621144 +0000 UTC m=+18.067167659 I0409 05:55:23.446344 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 05:55:23.446324248 +0000 UTC m=+44.674870733 I0409 05:55:23.446464 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 05:55:23.446561 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 05:55:23.44655275 +0000 UTC m=+44.675099255 I0409 05:55:23.460934 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 05:55:23.460915725 +0000 UTC m=+44.689462220 I0409 05:55:23.475493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:55:23.475588 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 05:55:23.475614 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 05:55:23.475606833 +0000 UTC m=+44.704153318 I0409 05:55:23.690694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8859p" condition "Approved" to 2026-04-09 05:55:23.690675279 +0000 UTC m=+44.919221774 I0409 05:55:23.723755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8859p" condition "Ready" to 2026-04-09 05:55:23.723739958 +0000 UTC m=+44.952286443 I0409 05:55:23.758200 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 05:55:23.758188163 +0000 UTC m=+44.986734658 I0409 05:55:23.792048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:55:23.792471 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 05:55:23.792461726 +0000 UTC m=+45.021008221 I0409 05:55:23.797693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:55:23.810043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:55:23.810260 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 05:55:23.81025246 +0000 UTC m=+45.038798945 I0409 05:59:43.088303 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-108.nip.io-tls" condition "Ready" to 2026-04-09 05:59:43.088273681 +0000 UTC m=+304.316820196 I0409 05:59:43.088390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-108.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 05:59:43.088591 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-108.nip.io-tls" condition "Issuing" to 2026-04-09 05:59:43.088540677 +0000 UTC m=+304.317087202 I0409 05:59:43.110905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-108.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-108.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:59:43.110955 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-108.nip.io-tls" condition "Ready" to 2026-04-09 05:59:43.110949885 +0000 UTC m=+304.339496360 I0409 05:59:43.207132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-108.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-108.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:59:43.228919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-108.nip.io-tls-q2trm" condition "Approved" to 2026-04-09 05:59:43.228905704 +0000 UTC m=+304.457452229 I0409 05:59:43.252061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-108.nip.io-tls-q2trm" condition "Ready" to 2026-04-09 05:59:43.25205124 +0000 UTC m=+304.480597715 I0409 05:59:43.274837 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-108.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 05:59:43.274785895 +0000 UTC m=+304.503332380 I0409 05:59:43.296851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-108.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-108.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:59:43.297185 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-108.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 05:59:43.297181113 +0000 UTC m=+304.525727598 I0409 05:59:43.313910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-108.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-108.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 05:59:43.314088 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-108.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 05:59:43.314083591 +0000 UTC m=+304.542630076 I0409 06:00:46.033364 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 06:00:46.033330084 +0000 UTC m=+367.261876599 I0409 06:00:46.033514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:00:46.033568 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 06:00:46.033558639 +0000 UTC m=+367.262105134 E0409 06:00:46.044660 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 06:00:46.044709 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 06:00:46.044697651 +0000 UTC m=+367.273244156 E0409 06:00:46.044777 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 06:00:46.045477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:00:46.045559 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 06:00:46.045551857 +0000 UTC m=+367.274098362 E0409 06:00:46.057567 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0409 06:00:46.058593 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 06:00:46.058707 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 06:00:46.058835 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0409 06:00:46.060978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:00:46.077926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sl5zr" condition "Approved" to 2026-04-09 06:00:46.077909625 +0000 UTC m=+367.306456150 I0409 06:00:46.088575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sl5zr" condition "Ready" to 2026-04-09 06:00:46.088565038 +0000 UTC m=+367.317111513 I0409 06:00:46.112971 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:00:46.112950954 +0000 UTC m=+367.341497439 I0409 06:00:46.129011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:00:51.058450 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:00:51.058426894 +0000 UTC m=+372.286973409 I0409 06:01:31.060970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:01:31.061033 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 06:01:31.061026736 +0000 UTC m=+412.289573211 I0409 06:01:31.061378 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 06:01:31.061374452 +0000 UTC m=+412.289920937 I0409 06:01:31.091723 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 06:01:31.091696328 +0000 UTC m=+412.320242823 I0409 06:01:31.092407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:01:31.092431 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 06:01:31.092426881 +0000 UTC m=+412.320973376 I0409 06:01:31.096981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:01:31.097064 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 06:01:31.097043459 +0000 UTC m=+412.325589954 I0409 06:01:31.097075 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 06:01:31.097065799 +0000 UTC m=+412.325612294 I0409 06:01:31.098282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:31.098331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:01:31.098348 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 06:01:31.098346141 +0000 UTC m=+412.326892626 I0409 06:01:31.124342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:31.124414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:01:31.124474 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 06:01:31.124466495 +0000 UTC m=+412.353012990 I0409 06:01:31.124726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:31.124944 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 06:01:31.124931813 +0000 UTC m=+412.353478308 I0409 06:01:31.315070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:31.360750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pmd7k" condition "Approved" to 2026-04-09 06:01:31.360734213 +0000 UTC m=+412.589280728 I0409 06:01:31.396243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pmd7k" condition "Ready" to 2026-04-09 06:01:31.396233746 +0000 UTC m=+412.624780231 I0409 06:01:31.417877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-b2jvf" condition "Approved" to 2026-04-09 06:01:31.417866684 +0000 UTC m=+412.646413169 I0409 06:01:31.434643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g2hvs" condition "Approved" to 2026-04-09 06:01:31.434631979 +0000 UTC m=+412.663178464 I0409 06:01:31.441612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-b2jvf" condition "Ready" to 2026-04-09 06:01:31.441599248 +0000 UTC m=+412.670145743 I0409 06:01:31.453773 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:01:31.453767485 +0000 UTC m=+412.682313960 I0409 06:01:31.458531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g2hvs" condition "Ready" to 2026-04-09 06:01:31.458516796 +0000 UTC m=+412.687063291 I0409 06:01:31.610707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:31.753142 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:01:31.753131535 +0000 UTC m=+412.981678030 E0409 06:01:31.814736 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-vlgbg\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0409 06:01:31.956645 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:01:31.956631546 +0000 UTC m=+413.185178041 I0409 06:01:32.052599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:32.053172 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:01:32.053161675 +0000 UTC m=+413.281708200 I0409 06:01:32.201243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:32.201751 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:01:32.201743736 +0000 UTC m=+413.430290211 I0409 06:01:32.555514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:32.705991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:32.902993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:39.055319 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" condition "Ready" to 2026-04-09 06:01:39.055304136 +0000 UTC m=+420.283850621 I0409 06:01:39.055343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:01:39.055381 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" condition "Issuing" to 2026-04-09 06:01:39.055366157 +0000 UTC m=+420.283912652 I0409 06:01:39.070303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:39.070387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:01:39.070526 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" condition "Issuing" to 2026-04-09 06:01:39.070491369 +0000 UTC m=+420.299037884 I0409 06:01:39.582183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:39.591098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5ksfr-zbmnt" condition "Approved" to 2026-04-09 06:01:39.591088556 +0000 UTC m=+420.819635041 I0409 06:01:39.608033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5ksfr-zbmnt" condition "Ready" to 2026-04-09 06:01:39.608022849 +0000 UTC m=+420.836569354 I0409 06:01:39.634195 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:01:39.634181766 +0000 UTC m=+420.862728251 I0409 06:01:39.653002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:39.653337 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:01:39.653329316 +0000 UTC m=+420.881875811 I0409 06:01:39.672287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5ksfr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:50.350279 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 06:01:50.350268162 +0000 UTC m=+431.578814647 I0409 06:01:50.350562 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:01:50.350591 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 06:01:50.350583797 +0000 UTC m=+431.579130292 I0409 06:01:50.375208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:50.375279 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 06:01:50.37527118 +0000 UTC m=+431.603817675 I0409 06:01:50.574688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:50.608955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2jcnt" condition "Approved" to 2026-04-09 06:01:50.608937945 +0000 UTC m=+431.837484450 I0409 06:01:50.635616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2jcnt" condition "Ready" to 2026-04-09 06:01:50.635581119 +0000 UTC m=+431.864127614 I0409 06:01:50.663344 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:01:50.663332943 +0000 UTC m=+431.891879438 I0409 06:01:50.684856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:01:50.685285 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:01:50.685278901 +0000 UTC m=+431.913825396 I0409 06:01:50.710731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:05:01.639549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:05:01.639638 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 06:05:01.639628181 +0000 UTC m=+622.868174696 I0409 06:05:01.639657 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 06:05:01.639641412 +0000 UTC m=+622.868187937 I0409 06:05:01.656229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:05:01.656336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:05:01.656357 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 06:05:01.656351699 +0000 UTC m=+622.884898204 I0409 06:05:02.185304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:05:02.199306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kp29p" condition "Approved" to 2026-04-09 06:05:02.199295533 +0000 UTC m=+623.427842018 I0409 06:05:02.222272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kp29p" condition "Ready" to 2026-04-09 06:05:02.222263482 +0000 UTC m=+623.450809967 I0409 06:05:02.255538 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:05:02.255525336 +0000 UTC m=+623.484071831 I0409 06:05:02.274634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:05:02.275068 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:05:02.27506052 +0000 UTC m=+623.503607015 I0409 06:05:02.297709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:05:40.886324 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-09 06:05:40.886307599 +0000 UTC m=+662.114854124 I0409 06:05:40.886618 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 06:05:40.886657 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 06:05:40.886648464 +0000 UTC m=+662.115194959 I0409 06:05:40.907487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:05:40.907565 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-09 06:05:40.907558171 +0000 UTC m=+662.136104676 I0409 06:05:41.096269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:05:41.142395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f5ccg" condition "Approved" to 2026-04-09 06:05:41.142383082 +0000 UTC m=+662.370929567 I0409 06:05:41.167731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f5ccg" condition "Ready" to 2026-04-09 06:05:41.167719936 +0000 UTC m=+662.396266421 I0409 06:05:41.195875 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:05:41.195860076 +0000 UTC m=+662.424406581 I0409 06:05:41.217643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:05:41.218666 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:05:41.218654207 +0000 UTC m=+662.447200712 I0409 06:05:41.229573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:05:41.242807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 06:05:41.243274 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 06:05:41.243263411 +0000 UTC m=+662.471809936