I0421 17:07:29.750587 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0421 17:07:29.750680 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0421 17:07:29.750725 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0421 17:07:29.752916 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0421 17:07:29.753215 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0421 17:07:29.753370 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0421 17:07:29.753372 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0421 17:07:29.755331 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0421 17:07:29.770794 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0421 17:07:29.778766 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0421 17:07:29.781667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0421 17:07:29.787878 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0421 17:07:29.787914 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0421 17:07:29.788174 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0421 17:07:29.792551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0421 17:07:29.795820 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0421 17:07:29.797959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0421 17:07:29.805120 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0421 17:07:29.808347 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0421 17:07:29.810890 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0421 17:07:29.813404 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0421 17:07:29.815967 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0421 17:07:29.818575 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0421 17:07:29.818634 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0421 17:07:29.818641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0421 17:07:29.820612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0421 17:07:29.825762 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0421 17:07:29.829695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0421 17:07:29.830843 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0421 17:07:29.830912 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0421 17:07:29.832825 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0421 17:07:29.832965 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0421 17:07:29.836056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0421 17:07:29.839013 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:07:29.839099 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:07:29.839982 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:07:29.865604 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:07:29.872105 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:07:29.893755 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:07:29.913834 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:07:29.920561 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:07:29.932540 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:07:29.948029 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:07:47.176214 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 17:07:47.176176372 +0000 UTC m=+17.458950727 I0421 17:07:47.949475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:07:47.949470 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 17:07:47.949450249 +0000 UTC m=+18.232224684 I0421 17:07:47.949577 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 17:07:47.949567481 +0000 UTC m=+18.232341876 E0421 17:07:47.961170 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:07:47.961233 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 17:07:47.961226894 +0000 UTC m=+18.244001259 E0421 17:07:47.961256 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:07:47.968182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:07:47.968231 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 17:07:47.968224853 +0000 UTC m=+18.250999218 E0421 17:07:47.978546 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0421 17:07:47.978607 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:07:47.978627 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:07:47.978654 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0421 17:07:47.993385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:07:48.014624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vtp9q" condition "Approved" to 2026-04-21 17:07:48.014601966 +0000 UTC m=+18.297376341 I0421 17:07:48.031964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vtp9q" condition "Ready" to 2026-04-21 17:07:48.031949305 +0000 UTC m=+18.314723670 I0421 17:07:48.057313 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:07:48.057301038 +0000 UTC m=+18.340075403 I0421 17:07:48.074331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:07:48.125011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:07:52.978996 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:07:52.978984406 +0000 UTC m=+23.261758791 I0421 17:08:13.465638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:08:13.465670 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 17:08:13.465662558 +0000 UTC m=+43.748436903 I0421 17:08:13.465818 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:08:13.4658027 +0000 UTC m=+43.748577055 I0421 17:08:13.478858 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 17:08:13.478831777 +0000 UTC m=+43.761606142 I0421 17:08:13.493967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:08:13.494064 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:08:13.494057292 +0000 UTC m=+43.776831647 I0421 17:08:13.566479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:08:13.605330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4dnb4" condition "Approved" to 2026-04-21 17:08:13.605317624 +0000 UTC m=+43.888091989 I0421 17:08:13.633876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4dnb4" condition "Ready" to 2026-04-21 17:08:13.633863149 +0000 UTC m=+43.916637514 I0421 17:08:13.666336 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:08:13.666310778 +0000 UTC m=+43.949085143 I0421 17:08:13.684545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:08:13.686259 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:08:13.686248157 +0000 UTC m=+43.969022512 I0421 17:08:13.708833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:24.632474 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Ready" to 2026-04-21 17:12:24.632424563 +0000 UTC m=+294.915198928 I0421 17:12:24.633994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:12:24.634079 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Issuing" to 2026-04-21 17:12:24.634066554 +0000 UTC m=+294.916840949 I0421 17:12:24.645694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:24.645743 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:12:24.645759 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Issuing" to 2026-04-21 17:12:24.645755041 +0000 UTC m=+294.928529406 I0421 17:12:24.853816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-233.nip.io-tls-nz8nz" condition "Approved" to 2026-04-21 17:12:24.853807309 +0000 UTC m=+295.136581674 I0421 17:12:24.882086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-233.nip.io-tls-nz8nz" condition "Ready" to 2026-04-21 17:12:24.882075246 +0000 UTC m=+295.164849611 I0421 17:12:24.910483 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:12:24.910470925 +0000 UTC m=+295.193245290 I0421 17:12:24.928055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:12:24.983932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:28.999931 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:13:29.000138 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 17:13:29.000121389 +0000 UTC m=+359.282895764 I0421 17:13:28.999966 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 17:13:28.999956757 +0000 UTC m=+359.282731112 E0421 17:13:29.013855 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:13:29.013968 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-21 17:13:29.013959384 +0000 UTC m=+359.296733739 E0421 17:13:29.014026 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:13:29.019985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:29.020088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:13:29.020114 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 17:13:29.020107835 +0000 UTC m=+359.302882200 E0421 17:13:29.025723 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0421 17:13:29.025791 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:13:29.025813 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:13:29.025837 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0421 17:13:29.053440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:29.060558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-88d7q" condition "Approved" to 2026-04-21 17:13:29.060548705 +0000 UTC m=+359.343323050 I0421 17:13:29.070808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-88d7q" condition "Ready" to 2026-04-21 17:13:29.070793581 +0000 UTC m=+359.353567936 I0421 17:13:29.092352 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:13:29.092342473 +0000 UTC m=+359.375116838 I0421 17:13:29.107254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:29.107447 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:13:29.107440889 +0000 UTC m=+359.390215254 I0421 17:13:29.121465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:29.123023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:29.124400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:13:29.124733 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:13:29.124726252 +0000 UTC m=+359.407500607 I0421 17:13:34.026466 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:13:34.026445785 +0000 UTC m=+364.309220170 I0421 17:14:14.144697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:14:14.144738 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:14:14.144721178 +0000 UTC m=+404.427495533 I0421 17:14:14.147404 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 17:14:14.147395858 +0000 UTC m=+404.430170213 I0421 17:14:14.147574 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 17:14:14.147571551 +0000 UTC m=+404.430345906 I0421 17:14:14.147704 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:14:14.147715 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:14:14.147712543 +0000 UTC m=+404.430486898 I0421 17:14:14.164680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:14:14.164719 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 17:14:14.164702228 +0000 UTC m=+404.447476593 I0421 17:14:14.165465 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 17:14:14.165458459 +0000 UTC m=+404.448232834 I0421 17:14:14.214712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:14.214786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:14:14.214817 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:14:14.214809576 +0000 UTC m=+404.497583941 I0421 17:14:14.214720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:14.215277 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 17:14:14.215268774 +0000 UTC m=+404.498043139 I0421 17:14:14.215485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:14.215538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:14:14.215562 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:14:14.215556518 +0000 UTC m=+404.498330883 I0421 17:14:14.374416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:14.393889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:14.402898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4r5dw" condition "Approved" to 2026-04-21 17:14:14.402890019 +0000 UTC m=+404.685664374 I0421 17:14:14.406983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r4vxz" condition "Approved" to 2026-04-21 17:14:14.406973279 +0000 UTC m=+404.689747634 I0421 17:14:14.421213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4r5dw" condition "Ready" to 2026-04-21 17:14:14.421204862 +0000 UTC m=+404.703979207 I0421 17:14:14.422834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r4vxz" condition "Ready" to 2026-04-21 17:14:14.422830526 +0000 UTC m=+404.705604881 I0421 17:14:14.478796 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:14:14.478785723 +0000 UTC m=+404.761560078 I0421 17:14:14.479295 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:14:14.47929143 +0000 UTC m=+404.762065785 I0421 17:14:14.497343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:14.497632 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:14:14.497627614 +0000 UTC m=+404.780401969 I0421 17:14:14.514097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:14.514412 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:14:14.514406905 +0000 UTC m=+404.797181250 I0421 17:14:14.543106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hfbb7" condition "Approved" to 2026-04-21 17:14:14.543087474 +0000 UTC m=+404.825861829 I0421 17:14:15.090653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hfbb7" condition "Ready" to 2026-04-21 17:14:15.090643907 +0000 UTC m=+405.373418262 I0421 17:14:15.187872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:15.286174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:15.686900 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:14:15.686888915 +0000 UTC m=+405.969663270 I0421 17:14:15.738260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:15.837613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:15.837934 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:14:15.837927359 +0000 UTC m=+406.120701724 I0421 17:14:16.037247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:22.005310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nvl96-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:14:22.005345 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nvl96-tls" condition "Issuing" to 2026-04-21 17:14:22.005336449 +0000 UTC m=+412.288110844 I0421 17:14:22.005482 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nvl96-tls" condition "Ready" to 2026-04-21 17:14:22.005469561 +0000 UTC m=+412.288243976 I0421 17:14:22.026129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nvl96-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nvl96-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:22.026279 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nvl96-tls" condition "Ready" to 2026-04-21 17:14:22.026269528 +0000 UTC m=+412.309043893 I0421 17:14:22.381693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nvl96-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nvl96-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:22.414449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nvl96-6ttdb" condition "Approved" to 2026-04-21 17:14:22.414430184 +0000 UTC m=+412.697204609 I0421 17:14:22.438928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nvl96-6ttdb" condition "Ready" to 2026-04-21 17:14:22.438917316 +0000 UTC m=+412.721691681 I0421 17:14:22.481046 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nvl96-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:14:22.481035747 +0000 UTC m=+412.763810112 I0421 17:14:22.500371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nvl96-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nvl96-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:34.980439 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:14:34.980481 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 17:14:34.980463302 +0000 UTC m=+425.263237677 I0421 17:14:34.980848 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 17:14:34.980827397 +0000 UTC m=+425.263601792 I0421 17:14:34.995514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:34.995582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:14:34.995601 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 17:14:34.995596361 +0000 UTC m=+425.278370726 I0421 17:14:35.227638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2c8dt" condition "Approved" to 2026-04-21 17:14:35.227623056 +0000 UTC m=+425.510397431 I0421 17:14:35.260950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2c8dt" condition "Ready" to 2026-04-21 17:14:35.260940528 +0000 UTC m=+425.543714883 I0421 17:14:35.292481 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:14:35.292465664 +0000 UTC m=+425.575240039 I0421 17:14:35.323347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:14:35.324417 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:14:35.324410946 +0000 UTC m=+425.607185291 I0421 17:14:35.341440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:17:45.909180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:17:45.909226 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 17:17:45.909218681 +0000 UTC m=+616.191993046 I0421 17:17:45.909179 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 17:17:45.90916463 +0000 UTC m=+616.191938995 I0421 17:17:45.926928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:17:45.926989 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:17:45.927006 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 17:17:45.926999791 +0000 UTC m=+616.209774156 I0421 17:17:46.197104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:17:46.204043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mfs2r" condition "Approved" to 2026-04-21 17:17:46.204030008 +0000 UTC m=+616.486804373 I0421 17:17:46.231813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mfs2r" condition "Ready" to 2026-04-21 17:17:46.231800291 +0000 UTC m=+616.514574656 I0421 17:17:46.267179 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:17:46.267169508 +0000 UTC m=+616.549943873 I0421 17:17:46.287399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:17:46.287923 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:17:46.287913393 +0000 UTC m=+616.570687788 I0421 17:17:46.310853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:18:25.135168 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:18:25.135211 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-21 17:18:25.135195578 +0000 UTC m=+655.417969933 I0421 17:18:25.135522 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 17:18:25.135517572 +0000 UTC m=+655.418291927 I0421 17:18:25.157489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:18:25.157715 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 17:18:25.157683972 +0000 UTC m=+655.440458357 I0421 17:18:25.337288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:18:25.372385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qf6vq" condition "Approved" to 2026-04-21 17:18:25.372369126 +0000 UTC m=+655.655143501 I0421 17:18:25.402475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qf6vq" condition "Ready" to 2026-04-21 17:18:25.402463832 +0000 UTC m=+655.685238187 I0421 17:18:25.429637 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:18:25.429624043 +0000 UTC m=+655.712398418 I0421 17:18:25.449846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:18:25.450181 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:18:25.450172713 +0000 UTC m=+655.732947068 I0421 17:18:25.453632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:18:25.470456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"