I0407 00:06:59.094011 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 00:06:59.094163 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 00:06:59.094277 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 00:06:59.101297 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 00:06:59.102064 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 00:06:59.102090 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 00:06:59.102076 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 00:06:59.105255 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 00:06:59.117631 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 00:06:59.124151 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 00:06:59.127807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 00:06:59.133863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 00:06:59.137874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 00:06:59.140740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 00:06:59.142673 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 00:06:59.142710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 00:06:59.144792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 00:06:59.146595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 00:06:59.148546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 00:06:59.155672 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 00:06:59.158561 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 00:06:59.161119 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 00:06:59.161154 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 00:06:59.161196 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 00:06:59.164011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 00:06:59.166262 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 00:06:59.168907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 00:06:59.172015 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 00:06:59.174508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 00:06:59.177326 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 00:06:59.177443 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 00:06:59.177510 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 00:06:59.177563 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 00:06:59.181276 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:06:59.181967 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:06:59.184932 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:06:59.200460 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:06:59.217995 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:06:59.229930 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:06:59.244513 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:06:59.265012 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:06:59.270785 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:06:59.284877 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 00:07:12.018997 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 00:07:12.018976449 +0000 UTC m=+12.954491000 I0407 00:07:12.818069 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 00:07:12.818055218 +0000 UTC m=+13.753569739 I0407 00:07:12.818336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:07:12.818408 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 00:07:12.81840074 +0000 UTC m=+13.753915281 E0407 00:07:12.831782 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:07:12.832025 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 00:07:12.831836173 +0000 UTC m=+13.767350694 E0407 00:07:12.832050 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:07:12.835693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:12.835760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:07:12.835790 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 00:07:12.835784062 +0000 UTC m=+13.771298583 E0407 00:07:12.847468 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 00:07:12.847553 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:07:12.847583 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:07:12.847610 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 00:07:12.919629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:12.974546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wj597" condition "Approved" to 2026-04-07 00:07:12.974531646 +0000 UTC m=+13.910046197 I0407 00:07:13.055247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wj597" condition "Ready" to 2026-04-07 00:07:13.055232888 +0000 UTC m=+13.990747459 I0407 00:07:13.116685 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:13.1166736 +0000 UTC m=+14.052188131 I0407 00:07:13.139541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:13.139839 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:13.139833281 +0000 UTC m=+14.075347802 I0407 00:07:13.152575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:13.155672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:13.155943 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:13.155935405 +0000 UTC m=+14.091449936 I0407 00:07:17.848055 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:17.848041132 +0000 UTC m=+18.783555653 I0407 00:07:41.006974 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 00:07:41.006932742 +0000 UTC m=+41.942447293 I0407 00:07:41.007348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:07:41.007436 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 00:07:41.007426477 +0000 UTC m=+41.942941008 I0407 00:07:41.022857 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 00:07:41.02284589 +0000 UTC m=+41.958360411 I0407 00:07:41.041949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:07:41.042137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:07:41.042166 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 00:07:41.042160491 +0000 UTC m=+41.977675012 I0407 00:07:41.274704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nbknc" condition "Approved" to 2026-04-07 00:07:41.274694096 +0000 UTC m=+42.210208617 I0407 00:07:41.308914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nbknc" condition "Ready" to 2026-04-07 00:07:41.308901044 +0000 UTC m=+42.244415595 I0407 00:07:41.344371 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:07:41.34435704 +0000 UTC m=+42.279871561 I0407 00:07:41.374767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:07.140256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-65.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:12:07.140332 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-65.nip.io-tls" condition "Issuing" to 2026-04-07 00:12:07.140279299 +0000 UTC m=+308.075793830 I0407 00:12:07.140440 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-65.nip.io-tls" condition "Ready" to 2026-04-07 00:12:07.140427221 +0000 UTC m=+308.075941752 I0407 00:12:07.161302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:07.161434 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-65.nip.io-tls" condition "Ready" to 2026-04-07 00:12:07.161424246 +0000 UTC m=+308.096938777 I0407 00:12:07.363846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:07.393414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-65.nip.io-tls-xfhf2" condition "Approved" to 2026-04-07 00:12:07.393399691 +0000 UTC m=+308.328914252 I0407 00:12:07.421052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-65.nip.io-tls-xfhf2" condition "Ready" to 2026-04-07 00:12:07.421041266 +0000 UTC m=+308.356555797 I0407 00:12:07.447489 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:12:07.447444771 +0000 UTC m=+308.382959292 I0407 00:12:07.465409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:07.465626 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:12:07.465619634 +0000 UTC m=+308.401134155 I0407 00:12:07.481006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:12:07.481590 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:12:07.481581743 +0000 UTC m=+308.417096274 I0407 00:12:07.485474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:12.730020 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 00:13:12.729984885 +0000 UTC m=+373.665499446 I0407 00:13:12.730052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:13:12.730135 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 00:13:12.730124187 +0000 UTC m=+373.665638718 I0407 00:13:12.746272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:12.746342 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 00:13:12.746335496 +0000 UTC m=+373.681850017 E0407 00:13:12.748926 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 00:13:12.748954 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 00:13:12.748948833 +0000 UTC m=+373.684463364 E0407 00:13:12.749009 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:13:12.761230 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 00:13:12.761310 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:13:12.761695 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 00:13:12.761867 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 00:13:12.766430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:12.790544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xwq97" condition "Approved" to 2026-04-07 00:13:12.790527259 +0000 UTC m=+373.726041820 I0407 00:13:12.804857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xwq97" condition "Ready" to 2026-04-07 00:13:12.804847331 +0000 UTC m=+373.740361852 I0407 00:13:12.830438 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:13:12.830419301 +0000 UTC m=+373.765933832 I0407 00:13:12.846225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:17.762440 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:13:17.762419043 +0000 UTC m=+378.697933564 I0407 00:13:58.009047 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 00:13:58.009026421 +0000 UTC m=+418.944540942 I0407 00:13:58.009098 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:13:58.009122 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:13:58.009154 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 00:13:58.009149993 +0000 UTC m=+418.944664514 I0407 00:13:58.009170 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 00:13:58.009166343 +0000 UTC m=+418.944680864 I0407 00:13:58.009313 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 00:13:58.009291715 +0000 UTC m=+418.944806226 I0407 00:13:58.017722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:13:58.017753 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 00:13:58.017745481 +0000 UTC m=+418.953260012 I0407 00:13:58.018336 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 00:13:58.018329799 +0000 UTC m=+418.953844370 I0407 00:13:58.037267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:58.037338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:13:58.037355 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 00:13:58.037348819 +0000 UTC m=+418.972863350 I0407 00:13:58.037277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:58.037585 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 00:13:58.037577942 +0000 UTC m=+418.973092463 I0407 00:13:58.038087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:58.038119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:13:58.038134 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 00:13:58.03813208 +0000 UTC m=+418.973646601 I0407 00:13:58.361694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:58.372468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zg6z6" condition "Approved" to 2026-04-07 00:13:58.372454168 +0000 UTC m=+419.307968699 I0407 00:13:58.392258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zg6z6" condition "Ready" to 2026-04-07 00:13:58.392247409 +0000 UTC m=+419.327761950 I0407 00:13:58.425165 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:13:58.42515562 +0000 UTC m=+419.360670141 I0407 00:13:58.428142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:58.447976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:58.454173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dsqxs" condition "Approved" to 2026-04-07 00:13:58.454161147 +0000 UTC m=+419.389675658 I0407 00:13:58.460481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6ts4p" condition "Approved" to 2026-04-07 00:13:58.460466964 +0000 UTC m=+419.395981495 I0407 00:13:58.475008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dsqxs" condition "Ready" to 2026-04-07 00:13:58.474998813 +0000 UTC m=+419.410513334 I0407 00:13:58.482746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6ts4p" condition "Ready" to 2026-04-07 00:13:58.482735699 +0000 UTC m=+419.418250230 I0407 00:13:58.952087 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:13:58.952072287 +0000 UTC m=+419.887586818 I0407 00:13:59.117342 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:13:59.11733121 +0000 UTC m=+420.052845731 I0407 00:13:59.170253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:59.172090 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:13:59.17208314 +0000 UTC m=+420.107597671 I0407 00:13:59.276974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:59.277303 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:13:59.27729757 +0000 UTC m=+420.212812101 I0407 00:13:59.568359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:13:59.721938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:05.904921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:05.904998 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls" condition "Issuing" to 2026-04-07 00:14:05.904984506 +0000 UTC m=+426.840499067 I0407 00:14:05.905118 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls" condition "Ready" to 2026-04-07 00:14:05.905104867 +0000 UTC m=+426.840619428 I0407 00:14:05.921887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:05.922006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:05.922087 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls" condition "Issuing" to 2026-04-07 00:14:05.922038368 +0000 UTC m=+426.857552889 I0407 00:14:06.159267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:06.164908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m9kx2-bvn6z" condition "Approved" to 2026-04-07 00:14:06.164898712 +0000 UTC m=+427.100413243 I0407 00:14:06.191999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m9kx2-bvn6z" condition "Ready" to 2026-04-07 00:14:06.191989141 +0000 UTC m=+427.127503662 I0407 00:14:06.236214 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:06.236188264 +0000 UTC m=+427.171702795 I0407 00:14:06.263434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:06.310213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m9kx2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:19.419308 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:14:19.419337 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 00:14:19.419328576 +0000 UTC m=+440.354843087 I0407 00:14:19.419618 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 00:14:19.41961468 +0000 UTC m=+440.355129201 I0407 00:14:19.432255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:19.432316 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 00:14:19.432310372 +0000 UTC m=+440.367824883 I0407 00:14:19.739516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:19.783223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sdflg" condition "Approved" to 2026-04-07 00:14:19.783207918 +0000 UTC m=+440.718722449 I0407 00:14:19.799830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sdflg" condition "Ready" to 2026-04-07 00:14:19.799821913 +0000 UTC m=+440.735336434 I0407 00:14:19.830714 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:19.830698681 +0000 UTC m=+440.766213212 I0407 00:14:19.849536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:19.849764 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:19.84975841 +0000 UTC m=+440.785272931 I0407 00:14:19.869309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:14:19.871224 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:14:19.871210111 +0000 UTC m=+440.806724642 I0407 00:14:19.878244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:17:42.911061 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 00:17:42.911043359 +0000 UTC m=+643.846557880 I0407 00:17:42.911448 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:17:42.911485 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 00:17:42.911482241 +0000 UTC m=+643.846996762 I0407 00:17:42.928360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:17:42.928413 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:17:42.928426 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 00:17:42.92842204 +0000 UTC m=+643.863936561 I0407 00:17:43.400147 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-klj5k" condition "Approved" to 2026-04-07 00:17:43.4001261 +0000 UTC m=+644.335640631 I0407 00:17:43.426748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-klj5k" condition "Ready" to 2026-04-07 00:17:43.426734615 +0000 UTC m=+644.362249136 I0407 00:17:43.463529 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:17:43.463514309 +0000 UTC m=+644.399028840 I0407 00:17:43.484099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:17:43.484370 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:17:43.484363481 +0000 UTC m=+644.419878012 I0407 00:17:43.496143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:17:43.512756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:18:24.047934 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 00:18:24.048146 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 00:18:24.048138146 +0000 UTC m=+684.983652677 I0407 00:18:24.048683 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 00:18:24.04867797 +0000 UTC m=+684.984192501 I0407 00:18:24.075323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:18:24.077025 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 00:18:24.077018343 +0000 UTC m=+685.012532864 I0407 00:18:24.207948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:18:24.232240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rrnk8" condition "Approved" to 2026-04-07 00:18:24.232229495 +0000 UTC m=+685.167744026 I0407 00:18:24.273823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rrnk8" condition "Ready" to 2026-04-07 00:18:24.273811997 +0000 UTC m=+685.209326528 I0407 00:18:24.362646 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 00:18:24.362633761 +0000 UTC m=+685.298148282 I0407 00:18:24.390923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 00:18:24.445461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"