I0418 22:10:47.860224 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0418 22:10:47.860395 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0418 22:10:47.860511 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0418 22:10:47.865314 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0418 22:10:47.865650 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0418 22:10:47.865776 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0418 22:10:47.865859 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0418 22:10:47.867672 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0418 22:10:47.885491 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0418 22:10:47.891230 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0418 22:10:47.894377 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0418 22:10:47.894434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0418 22:10:47.896627 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0418 22:10:47.898702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0418 22:10:47.900652 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0418 22:10:47.902543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0418 22:10:47.904702 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0418 22:10:47.904734 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0418 22:10:47.904808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0418 22:10:47.910020 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0418 22:10:47.910089 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0418 22:10:47.913717 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0418 22:10:47.916406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0418 22:10:47.918971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0418 22:10:47.921439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0418 22:10:47.924275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0418 22:10:47.926166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0418 22:10:47.927872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0418 22:10:47.930111 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0418 22:10:47.930146 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0418 22:10:47.932409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0418 22:10:47.934799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0418 22:10:47.937837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0418 22:10:47.940723 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:10:47.940903 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:10:47.940943 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:10:47.941893 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:10:47.958333 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:10:47.985208 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:10:47.997195 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:10:48.014321 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:10:48.022173 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:10:48.030946 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:10:59.799018 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-18 22:10:59.798998418 +0000 UTC m=+11.977774471 I0418 22:11:00.483254 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 22:11:00.483243863 +0000 UTC m=+12.662019926 I0418 22:11:00.494882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:11:00.494910 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 22:11:00.494904908 +0000 UTC m=+12.673680971 E0418 22:11:00.503182 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:11:00.503237 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-18 22:11:00.503231935 +0000 UTC m=+12.682007988 E0418 22:11:00.503253 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:11:00.534945 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0418 22:11:00.535026 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:11:00.535113 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:11:00.535143 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0418 22:11:00.535740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:11:00.535780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:11:00.535793 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 22:11:00.535788727 +0000 UTC m=+12.714564790 I0418 22:11:00.571477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:11:00.578561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gtptg" condition "Approved" to 2026-04-18 22:11:00.578546341 +0000 UTC m=+12.757322434 I0418 22:11:00.595903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gtptg" condition "Ready" to 2026-04-18 22:11:00.595893396 +0000 UTC m=+12.774669449 I0418 22:11:00.613745 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:11:00.61373187 +0000 UTC m=+12.792507933 I0418 22:11:00.627177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:11:00.627393 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:11:00.62738665 +0000 UTC m=+12.806162703 I0418 22:11:00.643740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:11:05.536287 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:11:05.536272589 +0000 UTC m=+17.715048682 I0418 22:11:27.585078 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 22:11:27.585029745 +0000 UTC m=+39.763805808 I0418 22:11:27.585344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:11:27.586980 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 22:11:27.586968794 +0000 UTC m=+39.765744887 I0418 22:11:27.594705 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-18 22:11:27.594693488 +0000 UTC m=+39.773469561 I0418 22:11:27.612892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:11:27.613058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:11:27.613113 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 22:11:27.613085358 +0000 UTC m=+39.791861421 I0418 22:11:27.977287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:11:27.990333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wnwh4" condition "Approved" to 2026-04-18 22:11:27.990318752 +0000 UTC m=+40.169094815 I0418 22:11:28.017174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wnwh4" condition "Ready" to 2026-04-18 22:11:28.017164186 +0000 UTC m=+40.195940249 I0418 22:11:28.057886 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:11:28.057809931 +0000 UTC m=+40.236586014 I0418 22:11:28.083396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:11:28.130262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:22.491312 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-18 22:16:22.491264556 +0000 UTC m=+334.670040599 I0418 22:16:22.491675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:22.491686 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-18 22:16:22.491683594 +0000 UTC m=+334.670459647 I0418 22:16:22.546285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:22.546374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:22.546403 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-18 22:16:22.546393456 +0000 UTC m=+334.725169549 I0418 22:16:22.701640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:22.708388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-9cksr" condition "Approved" to 2026-04-18 22:16:22.708375173 +0000 UTC m=+334.887151256 I0418 22:16:22.740851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-9cksr" condition "Ready" to 2026-04-18 22:16:22.740839968 +0000 UTC m=+334.919616031 I0418 22:16:22.777810 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:22.777799049 +0000 UTC m=+334.956575132 I0418 22:16:22.807593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:24.923739 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:17:24.924538 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 22:17:24.923850668 +0000 UTC m=+397.102626761 I0418 22:17:24.924655 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 22:17:24.923633215 +0000 UTC m=+397.102409298 E0418 22:17:25.095511 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:17:25.095568 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-18 22:17:25.09555617 +0000 UTC m=+397.274332253 E0418 22:17:25.095652 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:17:25.101228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:25.101317 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 22:17:25.101310815 +0000 UTC m=+397.280086868 E0418 22:17:25.126665 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0418 22:17:25.126756 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:17:25.126782 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:17:25.126815 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0418 22:17:25.160185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:25.281648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zbnqd" condition "Approved" to 2026-04-18 22:17:25.281631813 +0000 UTC m=+397.460407876 I0418 22:17:25.326266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zbnqd" condition "Ready" to 2026-04-18 22:17:25.326196942 +0000 UTC m=+397.504973035 I0418 22:17:25.571749 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:17:25.571726108 +0000 UTC m=+397.750502201 I0418 22:17:25.717208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:25.822679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:30.127529 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:17:30.127509202 +0000 UTC m=+402.306285295 I0418 22:18:11.536262 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 22:18:11.536243872 +0000 UTC m=+443.715019925 I0418 22:18:11.536645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:18:11.536670 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 22:18:11.536665958 +0000 UTC m=+443.715442011 I0418 22:18:11.544672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:18:11.544779 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 22:18:11.54476877 +0000 UTC m=+443.723544823 I0418 22:18:11.545921 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 22:18:11.545914607 +0000 UTC m=+443.724690670 I0418 22:18:11.566929 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 22:18:11.566893432 +0000 UTC m=+443.745669495 I0418 22:18:11.567419 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:18:11.567464 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 22:18:11.56745721 +0000 UTC m=+443.746233263 I0418 22:18:11.609196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:11.609594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:18:11.609616 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 22:18:11.609610662 +0000 UTC m=+443.788386715 I0418 22:18:11.617066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:11.617130 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 22:18:11.617123974 +0000 UTC m=+443.795900027 I0418 22:18:11.617396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:11.617466 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 22:18:11.617460779 +0000 UTC m=+443.796236822 I0418 22:18:11.897984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:11.938379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pgndc" condition "Approved" to 2026-04-18 22:18:11.938363989 +0000 UTC m=+444.117140032 I0418 22:18:11.969849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pgndc" condition "Ready" to 2026-04-18 22:18:11.969842351 +0000 UTC m=+444.148618404 E0418 22:18:11.980565 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-4nnfp\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0418 22:18:12.001295 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:12.001283043 +0000 UTC m=+444.180059096 I0418 22:18:12.022460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:12.069910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ftd8r" condition "Approved" to 2026-04-18 22:18:12.06989787 +0000 UTC m=+444.248673943 I0418 22:18:12.094820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ftd8r" condition "Ready" to 2026-04-18 22:18:12.094809142 +0000 UTC m=+444.273585205 I0418 22:18:12.099743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:12.280536 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-ftd8r" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-p2jf4" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0418 22:18:12.335082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hx54p" condition "Approved" to 2026-04-18 22:18:12.335068058 +0000 UTC m=+444.513844111 I0418 22:18:12.490109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hx54p" condition "Ready" to 2026-04-18 22:18:12.489984437 +0000 UTC m=+444.668760520 I0418 22:18:12.834755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z4p75" condition "Approved" to 2026-04-18 22:18:12.834741156 +0000 UTC m=+445.013517219 I0418 22:18:13.144816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z4p75" condition "Ready" to 2026-04-18 22:18:13.144805433 +0000 UTC m=+445.323581496 I0418 22:18:13.331301 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:13.331149537 +0000 UTC m=+445.509925630 I0418 22:18:13.579247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:13.682706 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:13.682668089 +0000 UTC m=+445.861444182 I0418 22:18:13.829327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:13.829903 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:13.829884788 +0000 UTC m=+446.008660881 I0418 22:18:14.296010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:14.296169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:14.431759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:21.292362 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" condition "Ready" to 2026-04-18 22:18:21.29233074 +0000 UTC m=+453.471106803 I0418 22:18:21.292923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:18:21.293018 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" condition "Issuing" to 2026-04-18 22:18:21.29299519 +0000 UTC m=+453.471771253 I0418 22:18:21.308103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:21.308319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:18:21.308427 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" condition "Issuing" to 2026-04-18 22:18:21.308363297 +0000 UTC m=+453.487139360 I0418 22:18:21.645803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6fkmq-c4qdr" condition "Approved" to 2026-04-18 22:18:21.645787345 +0000 UTC m=+453.824563408 I0418 22:18:21.669320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6fkmq-c4qdr" condition "Ready" to 2026-04-18 22:18:21.669306292 +0000 UTC m=+453.848082355 I0418 22:18:21.703105 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:21.703089211 +0000 UTC m=+453.881865274 I0418 22:18:21.723877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:21.724343 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:21.724336003 +0000 UTC m=+453.903112066 I0418 22:18:21.742169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:21.742525 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:21.742519002 +0000 UTC m=+453.921295065 I0418 22:18:21.746552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6fkmq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:44.326672 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 22:18:44.326649916 +0000 UTC m=+476.505426009 I0418 22:18:44.326972 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:18:44.327009 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 22:18:44.327002201 +0000 UTC m=+476.505778284 I0418 22:18:44.590112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:44.590230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:18:44.590267 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 22:18:44.590258479 +0000 UTC m=+476.769034562 I0418 22:18:45.054907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dj5m8" condition "Approved" to 2026-04-18 22:18:45.054892429 +0000 UTC m=+477.233668482 I0418 22:18:45.115487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dj5m8" condition "Ready" to 2026-04-18 22:18:45.115479112 +0000 UTC m=+477.294255165 I0418 22:18:45.312640 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:45.312627823 +0000 UTC m=+477.491403886 I0418 22:18:45.365344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:45.365753 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:45.36574415 +0000 UTC m=+477.544520213 I0418 22:18:45.406454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:01.908573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:22:01.908638 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 22:22:01.908624339 +0000 UTC m=+674.087400432 I0418 22:22:01.908569 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 22:22:01.908501707 +0000 UTC m=+674.087277800 I0418 22:22:01.928348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:01.928427 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 22:22:01.928419423 +0000 UTC m=+674.107195506 I0418 22:22:02.147541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:02.183121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2xjbh" condition "Approved" to 2026-04-18 22:22:02.183109951 +0000 UTC m=+674.361886004 I0418 22:22:02.208065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2xjbh" condition "Ready" to 2026-04-18 22:22:02.208053419 +0000 UTC m=+674.386829482 I0418 22:22:02.236277 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:02.236262068 +0000 UTC m=+674.415038131 I0418 22:22:02.258051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:02.258364 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:02.258358701 +0000 UTC m=+674.437134754 I0418 22:22:02.260523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:02.281998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:52.468840 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-18 22:22:52.468803151 +0000 UTC m=+724.647579244 I0418 22:22:52.468876 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:22:52.469142 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-18 22:22:52.469128873 +0000 UTC m=+724.647904986 I0418 22:22:52.484306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:52.484505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:22:52.484580 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-18 22:22:52.484575043 +0000 UTC m=+724.663351106 I0418 22:22:52.767876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-nxxsx" condition "Approved" to 2026-04-18 22:22:52.767861767 +0000 UTC m=+724.946637820 I0418 22:22:52.788136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-nxxsx" condition "Ready" to 2026-04-18 22:22:52.78812617 +0000 UTC m=+724.966902233 I0418 22:22:52.817907 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:52.817890625 +0000 UTC m=+724.996666688 I0418 22:22:52.838098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:52.899988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"