I0420 14:16:14.008159 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 14:16:14.008315 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 14:16:14.008397 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 14:16:14.014966 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 14:16:14.015645 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 14:16:14.015754 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 14:16:14.015751 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 14:16:14.021236 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 14:16:14.041155 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 14:16:14.041446 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 14:16:14.054828 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 14:16:14.057051 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 14:16:14.067976 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 14:16:14.073936 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 14:16:14.077033 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 14:16:14.079717 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 14:16:14.081499 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 14:16:14.083261 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 14:16:14.083318 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 14:16:14.083340 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 14:16:14.083362 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 14:16:14.083379 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 14:16:14.086303 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 14:16:14.089969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 14:16:14.096711 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 14:16:14.100243 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 14:16:14.103941 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 14:16:14.107149 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 14:16:14.109370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 14:16:14.111522 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 14:16:14.114072 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 14:16:14.114143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 14:16:14.116663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 14:16:14.120466 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:16:14.121115 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:16:14.124188 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:16:14.139942 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:16:14.157251 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:16:14.177292 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:16:14.197489 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:16:14.210703 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:16:14.213085 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:16:14.230264 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:16:26.396398 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 14:16:26.396376898 +0000 UTC m=+12.421556907 I0420 14:16:27.183282 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 14:16:27.183265724 +0000 UTC m=+13.208445723 I0420 14:16:27.184430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:16:27.184531 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 14:16:27.184520958 +0000 UTC m=+13.209700947 E0420 14:16:27.198597 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:16:27.198846 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 14:16:27.198818547 +0000 UTC m=+13.223998546 E0420 14:16:27.199765 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:16:27.201002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:16:27.201152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:16:27.201310 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 14:16:27.201301255 +0000 UTC m=+13.226481254 E0420 14:16:27.211917 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 14:16:27.212342 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:16:27.212567 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:16:27.213049 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 14:16:27.247370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rffdm" condition "Approved" to 2026-04-20 14:16:27.247347209 +0000 UTC m=+13.272527208 I0420 14:16:27.263958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rffdm" condition "Ready" to 2026-04-20 14:16:27.263936651 +0000 UTC m=+13.289116660 I0420 14:16:27.287505 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:16:27.287489161 +0000 UTC m=+13.312669140 I0420 14:16:27.309866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:16:27.310078 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:16:27.310071936 +0000 UTC m=+13.335251905 I0420 14:16:27.327365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:16:32.213041 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:16:32.213025868 +0000 UTC m=+18.238205847 I0420 14:16:56.332846 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 14:16:56.332771516 +0000 UTC m=+42.357951495 I0420 14:16:56.333129 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:16:56.333363 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 14:16:56.333348791 +0000 UTC m=+42.358528800 I0420 14:16:56.347634 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 14:16:56.347622644 +0000 UTC m=+42.372802613 I0420 14:16:56.369993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:16:56.372078 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 14:16:56.3720666 +0000 UTC m=+42.397246609 I0420 14:16:56.421535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:16:56.469295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cbxwk" condition "Approved" to 2026-04-20 14:16:56.469282154 +0000 UTC m=+42.494462133 I0420 14:16:56.501080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cbxwk" condition "Ready" to 2026-04-20 14:16:56.501066536 +0000 UTC m=+42.526246505 I0420 14:16:56.539162 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:16:56.539149681 +0000 UTC m=+42.564329660 I0420 14:16:56.564332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:16:56.622296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:21:45.998330 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-04-20 14:21:45.998317155 +0000 UTC m=+332.023497124 I0420 14:21:45.998819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:21:45.998985 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-04-20 14:21:45.998834257 +0000 UTC m=+332.024014226 I0420 14:21:46.014597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:21:46.014670 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:21:46.014700 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-04-20 14:21:46.014689173 +0000 UTC m=+332.039869202 I0420 14:21:46.302724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-s2855" condition "Approved" to 2026-04-20 14:21:46.302712186 +0000 UTC m=+332.327892165 I0420 14:21:46.331983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-s2855" condition "Ready" to 2026-04-20 14:21:46.331910451 +0000 UTC m=+332.357090430 I0420 14:21:46.363959 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:21:46.363945991 +0000 UTC m=+332.389125960 I0420 14:21:46.393087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:21:46.444104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:54.669827 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 14:22:54.669801318 +0000 UTC m=+400.694981327 I0420 14:22:54.670386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:22:54.670451 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 14:22:54.670436992 +0000 UTC m=+400.695617001 E0420 14:22:54.684076 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:22:54.684173 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 14:22:54.684164618 +0000 UTC m=+400.709344587 E0420 14:22:54.684207 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:22:54.685172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:54.686688 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 14:22:54.686673772 +0000 UTC m=+400.711853751 E0420 14:22:54.702245 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 14:22:54.702400 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:22:54.702462 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:22:54.702530 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 14:22:54.714100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:54.746663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zwhsk" condition "Approved" to 2026-04-20 14:22:54.746641255 +0000 UTC m=+400.771821234 I0420 14:22:54.761343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zwhsk" condition "Ready" to 2026-04-20 14:22:54.761327631 +0000 UTC m=+400.786507610 I0420 14:22:54.788267 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:54.788243021 +0000 UTC m=+400.813423000 I0420 14:22:54.809012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:54.810283 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:54.810269095 +0000 UTC m=+400.835449064 I0420 14:22:54.831070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:54.831338 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:54.83132612 +0000 UTC m=+400.856506099 I0420 14:22:59.703248 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:59.703230487 +0000 UTC m=+405.728410486 I0420 14:23:42.810182 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 14:23:42.810145119 +0000 UTC m=+448.835325088 I0420 14:23:42.810512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:23:42.815694 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 14:23:42.810581388 +0000 UTC m=+448.835761357 I0420 14:23:42.831806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:23:42.831859 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 14:23:42.831849972 +0000 UTC m=+448.857029931 I0420 14:23:42.832391 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 14:23:42.832372423 +0000 UTC m=+448.857552422 I0420 14:23:42.841423 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 14:23:42.841402961 +0000 UTC m=+448.866582930 I0420 14:23:42.843660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:23:42.843720 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 14:23:42.843710379 +0000 UTC m=+448.868890348 I0420 14:23:42.945981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:42.946246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:23:42.949120 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 14:23:42.949085137 +0000 UTC m=+448.974265116 I0420 14:23:42.991450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:42.991566 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 14:23:42.991555674 +0000 UTC m=+449.016735653 I0420 14:23:43.024521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:43.026161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:23:43.026211 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 14:23:43.026202506 +0000 UTC m=+449.051382485 I0420 14:23:43.080189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:43.200835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jfj9n" condition "Approved" to 2026-04-20 14:23:43.200816456 +0000 UTC m=+449.225996425 I0420 14:23:43.288699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:43.291930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jfj9n" condition "Ready" to 2026-04-20 14:23:43.291913286 +0000 UTC m=+449.317093265 I0420 14:23:43.294641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-b2l4b" condition "Approved" to 2026-04-20 14:23:43.294630002 +0000 UTC m=+449.319809971 I0420 14:23:43.381688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5xgxc" condition "Approved" to 2026-04-20 14:23:43.381670317 +0000 UTC m=+449.406850316 I0420 14:23:43.382306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-b2l4b" condition "Ready" to 2026-04-20 14:23:43.38229371 +0000 UTC m=+449.407473689 I0420 14:23:43.509422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5xgxc" condition "Ready" to 2026-04-20 14:23:43.50940764 +0000 UTC m=+449.534587619 I0420 14:23:43.547864 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:43.547853492 +0000 UTC m=+449.573033461 I0420 14:23:43.583615 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:43.583578957 +0000 UTC m=+449.608758966 I0420 14:23:43.589243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:43.589549 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:43.589545671 +0000 UTC m=+449.614725630 I0420 14:23:43.790456 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:43.79043479 +0000 UTC m=+449.815614769 I0420 14:23:43.827235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:43.996952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:44.026112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:44.026836 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:44.026824217 +0000 UTC m=+450.052004236 I0420 14:23:44.484649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:44.484675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:44.779576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:52.316131 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls" condition "Ready" to 2026-04-20 14:23:52.316090568 +0000 UTC m=+458.341270567 I0420 14:23:52.316755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:23:52.316838 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls" condition "Issuing" to 2026-04-20 14:23:52.316824633 +0000 UTC m=+458.342004632 I0420 14:23:52.454419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:52.454658 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls" condition "Ready" to 2026-04-20 14:23:52.454645323 +0000 UTC m=+458.479825322 I0420 14:23:52.716290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:52.767194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hz5kr-7s687" condition "Approved" to 2026-04-20 14:23:52.767172737 +0000 UTC m=+458.792352726 I0420 14:23:52.815826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hz5kr-7s687" condition "Ready" to 2026-04-20 14:23:52.815813107 +0000 UTC m=+458.840993076 I0420 14:23:52.877687 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:52.87766648 +0000 UTC m=+458.902846439 I0420 14:23:52.906176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hz5kr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:06.895177 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 14:24:06.89514709 +0000 UTC m=+472.920327059 I0420 14:24:06.896175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:24:06.896195 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 14:24:06.896191602 +0000 UTC m=+472.921371571 I0420 14:24:06.918246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:06.918391 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 14:24:06.91838219 +0000 UTC m=+472.943562179 I0420 14:24:07.206041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:07.243982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b5cfg" condition "Approved" to 2026-04-20 14:24:07.243971785 +0000 UTC m=+473.269151754 I0420 14:24:07.273463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b5cfg" condition "Ready" to 2026-04-20 14:24:07.273454422 +0000 UTC m=+473.298634391 I0420 14:24:07.312601 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:24:07.312586207 +0000 UTC m=+473.337766186 I0420 14:24:07.331670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:07.332610 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:24:07.33260183 +0000 UTC m=+473.357781809 I0420 14:24:07.354813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:29.686100 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 14:27:29.686075724 +0000 UTC m=+675.711255713 I0420 14:27:29.686182 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:27:29.686275 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 14:27:29.686261678 +0000 UTC m=+675.711441677 I0420 14:27:29.705469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:29.705623 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:27:29.705644 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 14:27:29.705635727 +0000 UTC m=+675.730815696 I0420 14:27:29.895848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:29.901296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-66296" condition "Approved" to 2026-04-20 14:27:29.901283153 +0000 UTC m=+675.926463132 I0420 14:27:29.924867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-66296" condition "Ready" to 2026-04-20 14:27:29.924857116 +0000 UTC m=+675.950037085 I0420 14:27:29.966543 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:29.966534453 +0000 UTC m=+675.991714412 I0420 14:27:29.991115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:30.041664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:17.114951 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:28:17.115048 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 14:28:17.115031276 +0000 UTC m=+723.140211255 I0420 14:28:17.115367 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 14:28:17.115350882 +0000 UTC m=+723.140530861 I0420 14:28:17.134042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:17.134155 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 14:28:17.134145839 +0000 UTC m=+723.159325818 I0420 14:28:17.437393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:17.464901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gk9jw" condition "Approved" to 2026-04-20 14:28:17.464889117 +0000 UTC m=+723.490069076 I0420 14:28:17.491242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gk9jw" condition "Ready" to 2026-04-20 14:28:17.491230521 +0000 UTC m=+723.516410500 I0420 14:28:17.527671 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:28:17.527653153 +0000 UTC m=+723.552833122 I0420 14:28:17.555372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"