I0420 08:06:23.403585 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 08:06:23.403726 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 08:06:23.403848 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 08:06:23.410630 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 08:06:23.411244 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 08:06:23.411434 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 08:06:23.411455 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 08:06:23.413828 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 08:06:23.426453 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 08:06:23.430377 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 08:06:23.433648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 08:06:23.439657 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 08:06:23.442874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 08:06:23.446268 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 08:06:23.446344 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 08:06:23.449048 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 08:06:23.451116 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 08:06:23.453176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 08:06:23.455242 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 08:06:23.460040 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 08:06:23.460069 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 08:06:23.460137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 08:06:23.462203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 08:06:23.463910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 08:06:23.465505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 08:06:23.467139 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 08:06:23.468917 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 08:06:23.470964 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 08:06:23.470989 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 08:06:23.470995 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 08:06:23.471214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 08:06:23.473024 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 08:06:23.475497 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 08:06:23.480538 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:23.480889 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:23.481309 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:23.481526 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:23.481944 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:23.482172 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:23.482357 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:23.482476 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:23.482831 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:23.567798 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:06:40.568610 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 08:06:40.568598093 +0000 UTC m=+17.194517435 I0420 08:06:41.276468 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 08:06:41.276452954 +0000 UTC m=+17.902372316 I0420 08:06:41.276561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:06:41.276601 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 08:06:41.276593146 +0000 UTC m=+17.902512478 E0420 08:06:41.292334 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:06:41.292430 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 08:06:41.292420811 +0000 UTC m=+17.918340153 E0420 08:06:41.292483 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:06:41.302074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:06:41.302308 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 08:06:41.302128991 +0000 UTC m=+17.928048333 E0420 08:06:41.315231 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 08:06:41.315379 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:06:41.315441 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:06:41.315505 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 08:06:41.316392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:06:41.316468 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 08:06:41.316460354 +0000 UTC m=+17.942379716 I0420 08:06:41.324216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nphr7" condition "Approved" to 2026-04-20 08:06:41.324206564 +0000 UTC m=+17.950125896 I0420 08:06:41.337793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nphr7" condition "Ready" to 2026-04-20 08:06:41.337783725 +0000 UTC m=+17.963703057 I0420 08:06:41.356923 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:06:41.356909861 +0000 UTC m=+17.982829203 I0420 08:06:41.375173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:06:41.375491 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:06:41.375485329 +0000 UTC m=+18.001404661 I0420 08:06:41.392037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:06:41.393212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:06:46.315626 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:06:46.315601064 +0000 UTC m=+22.941520396 I0420 08:07:08.856594 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 08:07:08.856549317 +0000 UTC m=+45.482468659 I0420 08:07:08.856844 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:07:08.856946 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 08:07:08.856934492 +0000 UTC m=+45.482853854 I0420 08:07:08.871596 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 08:07:08.871570581 +0000 UTC m=+45.497489923 I0420 08:07:08.882021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:07:08.882136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:07:08.882157 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 08:07:08.882152305 +0000 UTC m=+45.508071637 I0420 08:07:09.152169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ccztq" condition "Approved" to 2026-04-20 08:07:09.152160798 +0000 UTC m=+45.778080130 I0420 08:07:09.200002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ccztq" condition "Ready" to 2026-04-20 08:07:09.199991535 +0000 UTC m=+45.825910877 I0420 08:07:09.234496 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:07:09.234480992 +0000 UTC m=+45.860400334 I0420 08:07:09.252910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:07:09.306916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:11:40.268027 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-163.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:11:40.268084 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Issuing" to 2026-04-20 08:11:40.268069018 +0000 UTC m=+316.893988380 I0420 08:11:40.268041 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Ready" to 2026-04-20 08:11:40.268023577 +0000 UTC m=+316.893942949 I0420 08:11:40.285209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:11:40.285299 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Ready" to 2026-04-20 08:11:40.285289138 +0000 UTC m=+316.911208500 I0420 08:11:40.503081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:11:40.529044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-163.nip.io-tls-d7sjz" condition "Approved" to 2026-04-20 08:11:40.529030956 +0000 UTC m=+317.154950298 I0420 08:11:40.556428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-163.nip.io-tls-d7sjz" condition "Ready" to 2026-04-20 08:11:40.556413775 +0000 UTC m=+317.182333117 I0420 08:11:40.585118 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:11:40.585104158 +0000 UTC m=+317.211023490 I0420 08:11:40.601557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:11:40.601996 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:11:40.601987441 +0000 UTC m=+317.227906783 I0420 08:11:40.622875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:12:46.015128 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 08:12:46.015094756 +0000 UTC m=+382.641014098 I0420 08:12:46.015239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:12:46.015330 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 08:12:46.01532174 +0000 UTC m=+382.641241082 E0420 08:12:46.028235 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:12:46.028276 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 08:12:46.028269709 +0000 UTC m=+382.654189051 E0420 08:12:46.028379 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:12:46.029762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:12:46.030972 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:12:46.030999 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 08:12:46.030993023 +0000 UTC m=+382.656912355 E0420 08:12:46.037296 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 08:12:46.037386 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:12:46.037423 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:12:46.037465 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 08:12:46.068793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bnctl" condition "Approved" to 2026-04-20 08:12:46.068762885 +0000 UTC m=+382.694682247 I0420 08:12:46.081724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bnctl" condition "Ready" to 2026-04-20 08:12:46.081713125 +0000 UTC m=+382.707632467 I0420 08:12:46.103805 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:12:46.103794421 +0000 UTC m=+382.729713753 I0420 08:12:46.122521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:12:51.037861 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:12:51.037846755 +0000 UTC m=+387.663766117 I0420 08:13:30.531635 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:30.531663 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 08:13:30.531656912 +0000 UTC m=+427.157576244 I0420 08:13:30.531628 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 08:13:30.531554151 +0000 UTC m=+427.157473493 I0420 08:13:30.537244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:30.537269 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 08:13:30.537264487 +0000 UTC m=+427.163183809 I0420 08:13:30.537458 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 08:13:30.53744799 +0000 UTC m=+427.163367322 I0420 08:13:30.539371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:30.539448 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 08:13:30.53944428 +0000 UTC m=+427.165363602 I0420 08:13:30.539497 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 08:13:30.53944912 +0000 UTC m=+427.165368452 I0420 08:13:30.574546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:30.574628 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 08:13:30.574618813 +0000 UTC m=+427.200538145 I0420 08:13:30.578350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:30.578427 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 08:13:30.578418301 +0000 UTC m=+427.204337633 I0420 08:13:30.584785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:30.584888 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 08:13:30.584876868 +0000 UTC m=+427.210796210 I0420 08:13:30.937317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:30.939739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:30.973904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2rdqv" condition "Approved" to 2026-04-20 08:13:30.973891962 +0000 UTC m=+427.599811294 I0420 08:13:30.984845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wrcr8" condition "Approved" to 2026-04-20 08:13:30.984836148 +0000 UTC m=+427.610755480 I0420 08:13:31.008102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2rdqv" condition "Ready" to 2026-04-20 08:13:31.008091869 +0000 UTC m=+427.634011211 I0420 08:13:31.008265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wrcr8" condition "Ready" to 2026-04-20 08:13:31.008254432 +0000 UTC m=+427.634173774 I0420 08:13:31.034009 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:31.033995631 +0000 UTC m=+427.659914973 I0420 08:13:31.037726 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:31.037719387 +0000 UTC m=+427.663638739 I0420 08:13:31.060854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:31.067440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:31.307100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:31.463930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qkt6z" condition "Approved" to 2026-04-20 08:13:31.463889686 +0000 UTC m=+428.089809048 I0420 08:13:31.615691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qkt6z" condition "Ready" to 2026-04-20 08:13:31.615670143 +0000 UTC m=+428.241589515 I0420 08:13:32.017600 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:32.017585823 +0000 UTC m=+428.643505195 I0420 08:13:32.110041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:32.110455 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:32.110446976 +0000 UTC m=+428.736366318 I0420 08:13:32.307537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:42.387174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:42.387206 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls" condition "Issuing" to 2026-04-20 08:13:42.387197509 +0000 UTC m=+439.013116851 I0420 08:13:42.387575 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls" condition "Ready" to 2026-04-20 08:13:42.387559984 +0000 UTC m=+439.013479326 I0420 08:13:42.406130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:42.406203 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls" condition "Ready" to 2026-04-20 08:13:42.406195913 +0000 UTC m=+439.032115255 I0420 08:13:42.481025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:42.509980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4tmtv-pswnq" condition "Approved" to 2026-04-20 08:13:42.509971171 +0000 UTC m=+439.135890503 I0420 08:13:42.527685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4tmtv-pswnq" condition "Ready" to 2026-04-20 08:13:42.527676345 +0000 UTC m=+439.153595677 I0420 08:13:42.559305 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:42.559292997 +0000 UTC m=+439.185212329 I0420 08:13:42.584639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4tmtv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:53.790634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:53.790681 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 08:13:53.790673293 +0000 UTC m=+450.416592635 I0420 08:13:53.790726 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 08:13:53.790651192 +0000 UTC m=+450.416570514 I0420 08:13:53.803382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:53.803438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:53.803451 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 08:13:53.80344599 +0000 UTC m=+450.429365312 I0420 08:13:54.004807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z8f2q" condition "Approved" to 2026-04-20 08:13:54.004796858 +0000 UTC m=+450.630716190 I0420 08:13:54.023943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z8f2q" condition "Ready" to 2026-04-20 08:13:54.02392927 +0000 UTC m=+450.649848612 I0420 08:13:54.051222 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:54.051211501 +0000 UTC m=+450.677130833 I0420 08:13:54.073786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:54.074087 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:54.074080748 +0000 UTC m=+450.700000080 I0420 08:13:54.092486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:15.266562 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 08:17:15.266545673 +0000 UTC m=+651.892464995 I0420 08:17:15.266892 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:17:15.266933 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 08:17:15.266926148 +0000 UTC m=+651.892845500 I0420 08:17:15.282410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:15.282493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:17:15.282516 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 08:17:15.282509721 +0000 UTC m=+651.908429063 I0420 08:17:15.757038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:15.763674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9klvb" condition "Approved" to 2026-04-20 08:17:15.763664953 +0000 UTC m=+652.389584285 I0420 08:17:15.777869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9klvb" condition "Ready" to 2026-04-20 08:17:15.777857468 +0000 UTC m=+652.403776830 I0420 08:17:15.808706 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:17:15.808689121 +0000 UTC m=+652.434608493 I0420 08:17:15.828960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:15.829451 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:17:15.829444343 +0000 UTC m=+652.455363685 I0420 08:17:15.849263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:56.523745 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:17:56.523456 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 08:17:56.523432849 +0000 UTC m=+693.149352221 I0420 08:17:56.523843 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 08:17:56.523833622 +0000 UTC m=+693.149752964 I0420 08:17:56.542769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:56.542836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:17:56.542859 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 08:17:56.542851747 +0000 UTC m=+693.168771079 I0420 08:17:56.790232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hbznq" condition "Approved" to 2026-04-20 08:17:56.790219318 +0000 UTC m=+693.416138650 I0420 08:17:56.813627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hbznq" condition "Ready" to 2026-04-20 08:17:56.813617208 +0000 UTC m=+693.439536540 I0420 08:17:56.856036 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:17:56.856020953 +0000 UTC m=+693.481940295 I0420 08:17:56.891290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:56.891588 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:17:56.891581613 +0000 UTC m=+693.517500945 I0420 08:17:56.909553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:17:56.909821 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:17:56.909814043 +0000 UTC m=+693.535733375