I0410 09:45:34.696515 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0410 09:45:34.696611 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0410 09:45:34.696674 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0410 09:45:34.700894 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0410 09:45:34.701230 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0410 09:45:34.701419 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0410 09:45:34.701710 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0410 09:45:34.703792 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0410 09:45:34.816562 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0410 09:45:34.824226 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0410 09:45:34.828688 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0410 09:45:34.830505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0410 09:45:34.834765 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0410 09:45:34.834878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0410 09:45:34.838126 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0410 09:45:34.840416 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0410 09:45:34.840441 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0410 09:45:34.840456 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0410 09:45:34.843318 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0410 09:45:34.847200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0410 09:45:34.851546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0410 09:45:34.858990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0410 09:45:34.862784 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0410 09:45:34.866213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0410 09:45:34.868734 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0410 09:45:34.868933 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0410 09:45:34.870818 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0410 09:45:34.872584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0410 09:45:34.874507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0410 09:45:34.876380 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0410 09:45:34.879208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0410 09:45:34.885581 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0410 09:45:34.885654 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0410 09:45:34.888103 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 09:45:34.888853 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 09:45:34.889001 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 09:45:34.902001 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 09:45:34.921329 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 09:45:34.935358 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 09:45:34.949793 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 09:45:34.975030 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 09:45:35.006761 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 09:45:35.027713 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 09:45:48.677733 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-10 09:45:48.677711927 +0000 UTC m=+14.012600205 I0410 09:45:49.509843 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-10 09:45:49.509826864 +0000 UTC m=+14.844715132 I0410 09:45:49.510138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:45:49.510357 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 09:45:49.510301963 +0000 UTC m=+14.845190231 E0410 09:45:49.534149 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 09:45:49.534267 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-10 09:45:49.534256765 +0000 UTC m=+14.869145003 E0410 09:45:49.534293 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 09:45:49.539110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:45:49.539221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:45:49.539253 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 09:45:49.53924414 +0000 UTC m=+14.874132408 E0410 09:45:49.546953 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0410 09:45:49.547649 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 09:45:49.547742 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 09:45:49.547818 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0410 09:45:49.600031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v4299" condition "Approved" to 2026-04-10 09:45:49.600018156 +0000 UTC m=+14.934906404 I0410 09:45:49.619658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v4299" condition "Ready" to 2026-04-10 09:45:49.619646464 +0000 UTC m=+14.954534702 I0410 09:45:49.652872 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:45:49.652858615 +0000 UTC m=+14.987746853 I0410 09:45:49.676209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:45:49.676574 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:45:49.676566523 +0000 UTC m=+15.011454761 I0410 09:45:49.698377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:45:54.547494 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:45:54.547481423 +0000 UTC m=+19.882369691 I0410 09:46:19.837892 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:46:19.837906 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-10 09:46:19.837895859 +0000 UTC m=+45.172784107 I0410 09:46:19.838390 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 09:46:19.837950789 +0000 UTC m=+45.172839047 I0410 09:46:19.848869 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-10 09:46:19.848857516 +0000 UTC m=+45.183745764 I0410 09:46:19.862280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:46:19.862489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:46:19.862587 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 09:46:19.862519081 +0000 UTC m=+45.197407319 I0410 09:46:20.124845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:46:20.135229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qxt94" condition "Approved" to 2026-04-10 09:46:20.135220961 +0000 UTC m=+45.470109209 I0410 09:46:20.162684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qxt94" condition "Ready" to 2026-04-10 09:46:20.162669872 +0000 UTC m=+45.497558110 I0410 09:46:20.217017 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:46:20.217007427 +0000 UTC m=+45.551895655 I0410 09:46:20.266865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:46:20.266893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:46:20.267512 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:46:20.267502717 +0000 UTC m=+45.602390975 I0410 09:46:20.293428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:46:20.293750 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:46:20.293742781 +0000 UTC m=+45.628631039 I0410 09:51:01.565634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:51:01.565779 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Issuing" to 2026-04-10 09:51:01.565770709 +0000 UTC m=+326.900658947 I0410 09:51:01.566237 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Ready" to 2026-04-10 09:51:01.566232467 +0000 UTC m=+326.901120705 I0410 09:51:01.595292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:51:01.595663 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Ready" to 2026-04-10 09:51:01.595641985 +0000 UTC m=+326.930530213 I0410 09:51:01.799727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:51:01.839905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-216.nip.io-tls-ft2nw" condition "Approved" to 2026-04-10 09:51:01.839891003 +0000 UTC m=+327.174779251 I0410 09:51:01.872120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-216.nip.io-tls-ft2nw" condition "Ready" to 2026-04-10 09:51:01.872104361 +0000 UTC m=+327.206992629 I0410 09:51:01.904858 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:51:01.90483957 +0000 UTC m=+327.239727838 I0410 09:51:01.927607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:51:01.927970 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:51:01.927963605 +0000 UTC m=+327.262851853 I0410 09:51:01.945434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:51:01.947081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:07.334366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:52:07.334420 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-10 09:52:07.334407516 +0000 UTC m=+392.669295784 I0410 09:52:07.334538 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 09:52:07.334512598 +0000 UTC m=+392.669400866 E0410 09:52:07.383583 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 09:52:07.383652 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-10 09:52:07.383638904 +0000 UTC m=+392.718527182 E0410 09:52:07.383733 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 09:52:07.387648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:07.387747 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 09:52:07.387737738 +0000 UTC m=+392.722626016 E0410 09:52:07.399680 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0410 09:52:07.399859 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 09:52:07.399904 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 09:52:07.399943 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0410 09:52:07.408541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:07.433835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z8gtt" condition "Approved" to 2026-04-10 09:52:07.433815808 +0000 UTC m=+392.768704076 I0410 09:52:07.448234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z8gtt" condition "Ready" to 2026-04-10 09:52:07.448220632 +0000 UTC m=+392.783108880 I0410 09:52:07.474091 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:52:07.474078085 +0000 UTC m=+392.808966323 I0410 09:52:07.491602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:07.545065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:12.400591 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:52:12.40057766 +0000 UTC m=+397.735465908 I0410 09:52:56.881898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:52:56.883432 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-10 09:52:56.883420491 +0000 UTC m=+442.218308719 I0410 09:52:56.883921 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 09:52:56.883917788 +0000 UTC m=+442.218806026 I0410 09:52:56.884341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:52:56.884360 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-10 09:52:56.884357464 +0000 UTC m=+442.219245702 I0410 09:52:56.884696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:52:56.884745 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-10 09:52:56.88473834 +0000 UTC m=+442.219626578 I0410 09:52:56.885140 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-10 09:52:56.885136625 +0000 UTC m=+442.220024853 I0410 09:52:56.881966 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 09:52:56.881959409 +0000 UTC m=+442.216847647 I0410 09:52:56.926674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:56.926798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:52:56.926831 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-10 09:52:56.926823719 +0000 UTC m=+442.261711967 I0410 09:52:56.941996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:56.942204 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 09:52:56.942144432 +0000 UTC m=+442.277032710 I0410 09:52:56.943619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:56.943792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:52:56.943978 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 09:52:56.943962538 +0000 UTC m=+442.278850786 I0410 09:52:57.068137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:57.096423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-b895d" condition "Approved" to 2026-04-10 09:52:57.096405326 +0000 UTC m=+442.431293594 I0410 09:52:57.114797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-b895d" condition "Ready" to 2026-04-10 09:52:57.114783231 +0000 UTC m=+442.449671469 I0410 09:52:57.143908 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:52:57.143893373 +0000 UTC m=+442.478781611 I0410 09:52:57.173114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:57.217034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nv8xb" condition "Approved" to 2026-04-10 09:52:57.217010171 +0000 UTC m=+442.551898399 I0410 09:52:57.242047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nv8xb" condition "Ready" to 2026-04-10 09:52:57.242034814 +0000 UTC m=+442.576923052 I0410 09:52:57.265232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:57.274378 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:52:57.274348351 +0000 UTC m=+442.609236619 I0410 09:52:57.317969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:57.318567 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:52:57.318552091 +0000 UTC m=+442.653440339 I0410 09:52:57.520402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:52:57.806300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xgc6f" condition "Approved" to 2026-04-10 09:52:57.80627746 +0000 UTC m=+443.141165748 I0410 09:52:58.131817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xgc6f" condition "Ready" to 2026-04-10 09:52:58.131804019 +0000 UTC m=+443.466692267 I0410 09:52:58.379664 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:52:58.379638032 +0000 UTC m=+443.714526280 I0410 09:52:58.418282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:53:07.284653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:53:07.284701 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" condition "Issuing" to 2026-04-10 09:53:07.284687167 +0000 UTC m=+452.619575435 I0410 09:53:07.284802 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" condition "Ready" to 2026-04-10 09:53:07.284775588 +0000 UTC m=+452.619663856 I0410 09:53:07.298230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:53:07.298340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:53:07.298366 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" condition "Issuing" to 2026-04-10 09:53:07.298359512 +0000 UTC m=+452.633247760 I0410 09:53:07.511243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cxkcb-f2kr4" condition "Approved" to 2026-04-10 09:53:07.511227715 +0000 UTC m=+452.846115963 I0410 09:53:07.533132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cxkcb-f2kr4" condition "Ready" to 2026-04-10 09:53:07.533083797 +0000 UTC m=+452.867972035 I0410 09:53:07.567431 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:53:07.567410758 +0000 UTC m=+452.902299036 I0410 09:53:07.586760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:53:07.588281 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:53:07.588273256 +0000 UTC m=+452.923161494 I0410 09:53:07.621108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:53:07.621511 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cxkcb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:53:07.621503341 +0000 UTC m=+452.956391569 I0410 09:53:25.372405 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:53:25.372444 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-10 09:53:25.372435214 +0000 UTC m=+470.707323452 I0410 09:53:25.373656 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-10 09:53:25.37365083 +0000 UTC m=+470.708539068 I0410 09:53:25.389454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:53:25.389896 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-10 09:53:25.389884528 +0000 UTC m=+470.724772856 I0410 09:53:25.661286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:53:25.705334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lpwkc" condition "Approved" to 2026-04-10 09:53:25.705315716 +0000 UTC m=+471.040203954 I0410 09:53:25.731924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lpwkc" condition "Ready" to 2026-04-10 09:53:25.73191552 +0000 UTC m=+471.066803758 I0410 09:53:25.791697 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:53:25.791666136 +0000 UTC m=+471.126554374 I0410 09:53:25.811414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:56:43.389840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:56:43.389985 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-10 09:56:43.389971158 +0000 UTC m=+668.724859436 I0410 09:56:43.390802 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-10 09:56:43.390784378 +0000 UTC m=+668.725672626 I0410 09:56:43.410619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:56:43.410825 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-10 09:56:43.41080983 +0000 UTC m=+668.745698128 I0410 09:56:43.662889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:56:43.699951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mw28t" condition "Approved" to 2026-04-10 09:56:43.699931439 +0000 UTC m=+669.034819687 I0410 09:56:43.727856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mw28t" condition "Ready" to 2026-04-10 09:56:43.727843679 +0000 UTC m=+669.062731917 I0410 09:56:43.763499 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:56:43.763485234 +0000 UTC m=+669.098373482 I0410 09:56:43.798593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:57:25.643932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 09:57:25.644037 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-10 09:57:25.644023358 +0000 UTC m=+710.978911636 I0410 09:57:25.644735 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-10 09:57:25.644726144 +0000 UTC m=+710.979614422 I0410 09:57:25.664618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:57:25.664830 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-10 09:57:25.664823349 +0000 UTC m=+710.999711587 I0410 09:57:25.802061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 09:57:25.831847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-p4hp8" condition "Approved" to 2026-04-10 09:57:25.831837042 +0000 UTC m=+711.166725280 I0410 09:57:25.860629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-p4hp8" condition "Ready" to 2026-04-10 09:57:25.860615787 +0000 UTC m=+711.195504015 I0410 09:57:25.889140 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 09:57:25.887388259 +0000 UTC m=+711.222276537 I0410 09:57:25.912128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"