I0417 00:29:05.468203 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 00:29:05.468322 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 00:29:05.468397 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 00:29:05.474347 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 00:29:05.474722 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 00:29:05.474893 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 00:29:05.474984 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 00:29:05.477348 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 00:29:05.492395 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 00:29:05.492580 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 00:29:05.496458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 00:29:05.499472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 00:29:05.505954 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 00:29:05.506035 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 00:29:05.508890 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 00:29:05.511333 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 00:29:05.513567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 00:29:05.515379 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 00:29:05.515434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 00:29:05.517259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 00:29:05.518940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 00:29:05.525075 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 00:29:05.529054 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 00:29:05.529098 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 00:29:05.531936 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 00:29:05.534293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 00:29:05.536599 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 00:29:05.538725 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 00:29:05.538799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 00:29:05.541169 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 00:29:05.543517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 00:29:05.545036 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 00:29:05.548438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 00:29:05.550715 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:05.551091 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:05.551230 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:05.551447 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:05.551501 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:05.551767 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:05.551824 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:05.552154 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:05.553140 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:05.636243 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 00:29:22.928266 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 00:29:22.928247574 +0000 UTC m=+17.493163137 I0417 00:29:23.632015 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 00:29:23.631999879 +0000 UTC m=+18.196915442 I0417 00:29:23.632192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:29:23.632251 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 00:29:23.63223629 +0000 UTC m=+18.197151843 E0417 00:29:23.648823 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 00:29:23.648972 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 00:29:23.648964033 +0000 UTC m=+18.213879566 E0417 00:29:23.649106 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 00:29:23.650521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:23.650575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:29:23.650594 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 00:29:23.65059027 +0000 UTC m=+18.215505803 E0417 00:29:23.660189 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 00:29:23.660389 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 00:29:23.660527 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 00:29:23.660633 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 00:29:23.688353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:23.694903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qktcx" condition "Approved" to 2026-04-17 00:29:23.694892037 +0000 UTC m=+18.259807570 I0417 00:29:23.711165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qktcx" condition "Ready" to 2026-04-17 00:29:23.711154199 +0000 UTC m=+18.276069742 I0417 00:29:23.737507 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:29:23.737492883 +0000 UTC m=+18.302408416 I0417 00:29:23.755186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:23.755414 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:29:23.755406393 +0000 UTC m=+18.320321916 I0417 00:29:23.770201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:28.660894 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:29:28.660876034 +0000 UTC m=+23.225791597 I0417 00:29:50.869824 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:29:50.870118 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 00:29:50.869882659 +0000 UTC m=+45.434798192 I0417 00:29:50.872687 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 00:29:50.87018317 +0000 UTC m=+45.435098703 I0417 00:29:50.880724 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 00:29:50.880714813 +0000 UTC m=+45.445630336 I0417 00:29:50.912044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:50.912128 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 00:29:50.912119296 +0000 UTC m=+45.477034829 I0417 00:29:51.060212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:51.093682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7682j" condition "Approved" to 2026-04-17 00:29:51.093669749 +0000 UTC m=+45.658585282 I0417 00:29:51.128724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7682j" condition "Ready" to 2026-04-17 00:29:51.128713713 +0000 UTC m=+45.693629236 I0417 00:29:51.158140 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:29:51.158129943 +0000 UTC m=+45.723045476 I0417 00:29:51.186419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:29:51.186763 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:29:51.186758126 +0000 UTC m=+45.751673649 I0417 00:29:51.208768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:33:51.396186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-19.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:33:51.396244 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Issuing" to 2026-04-17 00:33:51.396238367 +0000 UTC m=+285.961153900 I0417 00:33:51.396340 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready" to 2026-04-17 00:33:51.396210377 +0000 UTC m=+285.961125930 I0417 00:33:51.412277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:33:51.412422 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready" to 2026-04-17 00:33:51.412415126 +0000 UTC m=+285.977330659 I0417 00:33:51.818929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:33:52.100055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-19.nip.io-tls-qk7gh" condition "Approved" to 2026-04-17 00:33:52.100041177 +0000 UTC m=+286.664956730 I0417 00:33:52.324834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-19.nip.io-tls-qk7gh" condition "Ready" to 2026-04-17 00:33:52.324819732 +0000 UTC m=+286.889735285 I0417 00:33:52.356325 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:33:52.356313821 +0000 UTC m=+286.921229354 I0417 00:33:52.374483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:33:52.374783 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:33:52.37477606 +0000 UTC m=+286.939691593 I0417 00:33:52.398401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:34:54.863892 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 00:34:54.86388015 +0000 UTC m=+349.428795683 I0417 00:34:54.864011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:34:54.864050 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 00:34:54.864041704 +0000 UTC m=+349.428957227 E0417 00:34:54.876868 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 00:34:54.876901 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 00:34:54.876894173 +0000 UTC m=+349.441809696 E0417 00:34:54.876940 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 00:34:54.880570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:34:54.880635 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 00:34:54.880627702 +0000 UTC m=+349.445543235 E0417 00:34:54.890983 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 00:34:54.891341 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 00:34:54.891375 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 00:34:54.891428 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 00:34:54.899726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:34:54.919348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gwsqw" condition "Approved" to 2026-04-17 00:34:54.919337475 +0000 UTC m=+349.484253008 I0417 00:34:54.933272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gwsqw" condition "Ready" to 2026-04-17 00:34:54.933263472 +0000 UTC m=+349.498179005 I0417 00:34:54.953819 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:34:54.953809585 +0000 UTC m=+349.518725108 I0417 00:34:54.968603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:34:55.000852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:34:59.891455 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:34:59.891440762 +0000 UTC m=+354.456356315 I0417 00:35:40.815210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:40.815297 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 00:35:40.815288829 +0000 UTC m=+395.380204382 I0417 00:35:40.815973 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 00:35:40.815963836 +0000 UTC m=+395.380879389 I0417 00:35:40.826739 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:40.827550 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 00:35:40.826759835 +0000 UTC m=+395.391675348 I0417 00:35:40.827866 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 00:35:40.827862011 +0000 UTC m=+395.392777534 I0417 00:35:40.829007 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 00:35:40.829003169 +0000 UTC m=+395.393918692 I0417 00:35:40.829471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:40.829488 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 00:35:40.82948522 +0000 UTC m=+395.394400743 I0417 00:35:40.844826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:40.844899 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 00:35:40.84489291 +0000 UTC m=+395.409808433 I0417 00:35:40.870876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:40.870950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:40.870981 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 00:35:40.870974716 +0000 UTC m=+395.435890249 I0417 00:35:40.872103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:40.872249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:35:40.872272 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 00:35:40.872266727 +0000 UTC m=+395.437182250 I0417 00:35:41.006548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:41.014577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kgrpn" condition "Approved" to 2026-04-17 00:35:41.014564284 +0000 UTC m=+395.579479807 I0417 00:35:41.031075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kgrpn" condition "Ready" to 2026-04-17 00:35:41.031066369 +0000 UTC m=+395.595981902 I0417 00:35:41.062301 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:41.062288547 +0000 UTC m=+395.627204100 I0417 00:35:41.088395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:41.088819 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:41.088813973 +0000 UTC m=+395.653729486 I0417 00:35:41.106678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:41.114362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0417 00:35:41.119620 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-25jx4\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0417 00:35:41.141927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mkprt" condition "Approved" to 2026-04-17 00:35:41.141913455 +0000 UTC m=+395.706828988 I0417 00:35:41.160607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mkprt" condition "Ready" to 2026-04-17 00:35:41.160596754 +0000 UTC m=+395.725512277 I0417 00:35:41.285530 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:41.285513558 +0000 UTC m=+395.850429081 I0417 00:35:41.371804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:41.372281 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:41.372272416 +0000 UTC m=+395.937187969 E0417 00:35:41.572745 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-2s7xf\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0417 00:35:41.829938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dt825" condition "Approved" to 2026-04-17 00:35:41.829922945 +0000 UTC m=+396.394838478 I0417 00:35:42.286417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dt825" condition "Ready" to 2026-04-17 00:35:42.286403993 +0000 UTC m=+396.851319526 I0417 00:35:42.478637 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-dt825" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-zgf4t" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0417 00:35:42.625748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hv8xs" condition "Approved" to 2026-04-17 00:35:42.625733821 +0000 UTC m=+397.190649354 I0417 00:35:42.679044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hv8xs" condition "Ready" to 2026-04-17 00:35:42.679029576 +0000 UTC m=+397.243945109 I0417 00:35:43.208771 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:43.20875608 +0000 UTC m=+397.773671603 I0417 00:35:43.303017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:35:43.303404 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:35:43.303397831 +0000 UTC m=+397.868313364 I0417 00:35:43.471720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:36:02.638389 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls" condition "Ready" to 2026-04-17 00:36:02.638346565 +0000 UTC m=+417.203262138 I0417 00:36:02.639054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:36:02.639085 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls" condition "Issuing" to 2026-04-17 00:36:02.639078662 +0000 UTC m=+417.203994195 I0417 00:36:02.652883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:36:02.652957 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls" condition "Ready" to 2026-04-17 00:36:02.652949253 +0000 UTC m=+417.217864776 I0417 00:36:02.926254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:36:02.983194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mxqkj-pmz8q" condition "Approved" to 2026-04-17 00:36:02.983179042 +0000 UTC m=+417.548094595 I0417 00:36:03.003432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mxqkj-pmz8q" condition "Ready" to 2026-04-17 00:36:03.00342245 +0000 UTC m=+417.568337973 I0417 00:36:03.029223 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:36:03.029209505 +0000 UTC m=+417.594125038 I0417 00:36:03.052853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:36:03.053196 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:36:03.053189089 +0000 UTC m=+417.618104622 I0417 00:36:03.074074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mxqkj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:36:09.206645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:36:09.206677 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 00:36:09.206669104 +0000 UTC m=+423.771584637 I0417 00:36:09.207114 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 00:36:09.207107924 +0000 UTC m=+423.772023457 I0417 00:36:09.224045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:36:09.224104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:36:09.224118 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 00:36:09.224111703 +0000 UTC m=+423.789027236 I0417 00:36:09.440949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bj5t4" condition "Approved" to 2026-04-17 00:36:09.440933915 +0000 UTC m=+424.005849448 I0417 00:36:09.458259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bj5t4" condition "Ready" to 2026-04-17 00:36:09.458247071 +0000 UTC m=+424.023162604 I0417 00:36:09.494636 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:36:09.494619084 +0000 UTC m=+424.059534617 I0417 00:36:09.630909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:36:09.673365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:33.758677 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 00:39:33.758646483 +0000 UTC m=+628.323562016 I0417 00:39:33.759643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:39:33.759685 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 00:39:33.759674424 +0000 UTC m=+628.324589977 I0417 00:39:33.777547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:33.777613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:39:33.777785 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 00:39:33.777774684 +0000 UTC m=+628.342690217 I0417 00:39:33.937084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-g8xmk" condition "Approved" to 2026-04-17 00:39:33.937071119 +0000 UTC m=+628.501986632 I0417 00:39:33.952364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-g8xmk" condition "Ready" to 2026-04-17 00:39:33.952350955 +0000 UTC m=+628.517266478 I0417 00:39:33.991424 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:39:33.991097994 +0000 UTC m=+628.556013517 I0417 00:39:34.018064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:34.018404 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:39:34.018397064 +0000 UTC m=+628.583312587 I0417 00:39:34.034575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:34.034770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:39:34.035016 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:39:34.035007665 +0000 UTC m=+628.599923188 I0417 00:40:15.015132 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 00:40:15.015117404 +0000 UTC m=+669.580032937 I0417 00:40:15.015669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:40:15.015717 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 00:40:15.015689405 +0000 UTC m=+669.580604938 I0417 00:40:15.039844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 00:40:15.040106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 00:40:15.040152 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 00:40:15.040143932 +0000 UTC m=+669.605059465 I0417 00:40:15.283962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f5sfq" condition "Approved" to 2026-04-17 00:40:15.283951953 +0000 UTC m=+669.848867486 I0417 00:40:15.299477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f5sfq" condition "Ready" to 2026-04-17 00:40:15.29946947 +0000 UTC m=+669.864384993 I0417 00:40:15.326748 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 00:40:15.326740422 +0000 UTC m=+669.891655935 I0417 00:40:15.344274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"