I0420 04:47:10.179980 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 04:47:10.180110 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 04:47:10.180378 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 04:47:10.185677 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 04:47:10.186426 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 04:47:10.186527 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 04:47:10.186717 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 04:47:10.192179 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 04:47:10.209141 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 04:47:10.212695 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 04:47:10.212788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 04:47:10.215388 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 04:47:10.218096 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 04:47:10.223430 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 04:47:10.228527 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 04:47:10.231114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 04:47:10.233473 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 04:47:10.233503 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 04:47:10.233513 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 04:47:10.233521 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 04:47:10.233663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 04:47:10.235951 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 04:47:10.237818 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 04:47:10.239737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 04:47:10.241545 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 04:47:10.241626 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 04:47:10.247621 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 04:47:10.250114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 04:47:10.252478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 04:47:10.254935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 04:47:10.256923 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 04:47:10.258721 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 04:47:10.260572 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 04:47:10.265125 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 04:47:10.265210 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 04:47:10.265682 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 04:47:10.267190 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 04:47:10.268827 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 04:47:10.269189 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 04:47:10.269502 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 04:47:10.269826 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 04:47:10.270538 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 04:47:10.351012 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 04:47:21.535634 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 04:47:21.535610629 +0000 UTC m=+11.388531281 I0420 04:47:22.273821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:47:22.273863 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 04:47:22.273854731 +0000 UTC m=+12.126775383 I0420 04:47:22.276293 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 04:47:22.276259753 +0000 UTC m=+12.129180415 E0420 04:47:22.290721 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 04:47:22.290806 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 04:47:22.290796142 +0000 UTC m=+12.143716794 E0420 04:47:22.290840 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 04:47:22.291756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:47:22.291817 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 04:47:22.291810173 +0000 UTC m=+12.144730815 E0420 04:47:22.306732 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 04:47:22.306908 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 04:47:22.306947 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 04:47:22.307003 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 04:47:22.310719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:47:22.310769 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 04:47:22.310762106 +0000 UTC m=+12.163682748 I0420 04:47:22.311048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fh79t" condition "Approved" to 2026-04-20 04:47:22.311042114 +0000 UTC m=+12.163962756 I0420 04:47:22.327013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fh79t" condition "Ready" to 2026-04-20 04:47:22.327003066 +0000 UTC m=+12.179923708 I0420 04:47:22.348083 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:47:22.348074383 +0000 UTC m=+12.200995025 I0420 04:47:22.362528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:47:22.362743 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:47:22.362737575 +0000 UTC m=+12.215658207 I0420 04:47:22.381301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:47:27.307318 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:47:27.307262439 +0000 UTC m=+17.160183101 I0420 04:47:48.955768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:47:48.955805 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 04:47:48.955797518 +0000 UTC m=+38.808718150 I0420 04:47:48.956139 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 04:47:48.956135486 +0000 UTC m=+38.809056118 I0420 04:47:48.968077 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 04:47:48.968065663 +0000 UTC m=+38.820986305 I0420 04:47:48.979456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:47:48.979550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:47:48.979599 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 04:47:48.97959184 +0000 UTC m=+38.832512492 I0420 04:47:49.198606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k9w5w" condition "Approved" to 2026-04-20 04:47:49.198596727 +0000 UTC m=+39.051517369 I0420 04:47:49.230481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k9w5w" condition "Ready" to 2026-04-20 04:47:49.230470501 +0000 UTC m=+39.083391143 I0420 04:47:49.262063 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:47:49.262051317 +0000 UTC m=+39.114971949 I0420 04:47:49.288511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:47:49.288957 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:47:49.288950727 +0000 UTC m=+39.141871349 I0420 04:47:49.317287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:47:49.317634 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:47:49.317626186 +0000 UTC m=+39.170546818 I0420 04:51:53.512097 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready" to 2026-04-20 04:51:53.51205392 +0000 UTC m=+283.364974582 I0420 04:51:53.512343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:51:53.512446 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-04-20 04:51:53.512438291 +0000 UTC m=+283.365358933 I0420 04:51:53.526593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:51:53.526638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:51:53.526650 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-04-20 04:51:53.526645692 +0000 UTC m=+283.379566334 I0420 04:51:53.777568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:51:53.784213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-l4rkt" condition "Approved" to 2026-04-20 04:51:53.784203278 +0000 UTC m=+283.637123910 I0420 04:51:53.806947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-l4rkt" condition "Ready" to 2026-04-20 04:51:53.806919032 +0000 UTC m=+283.659839674 I0420 04:51:53.830266 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:51:53.830255314 +0000 UTC m=+283.683175946 I0420 04:51:53.848560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:51:53.848921 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:51:53.848914827 +0000 UTC m=+283.701835469 I0420 04:51:53.862894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:51:53.872567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:52:57.488733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:52:57.488964 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 04:52:57.488952994 +0000 UTC m=+347.341873666 I0420 04:52:57.489413 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 04:52:57.489407965 +0000 UTC m=+347.342328607 I0420 04:52:57.503869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:52:57.503926 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 04:52:57.503919496 +0000 UTC m=+347.356840138 E0420 04:52:57.504109 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 04:52:57.504166 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 04:52:57.504158631 +0000 UTC m=+347.357079273 E0420 04:52:57.504292 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 04:52:57.516283 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 04:52:57.516747 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 04:52:57.516879 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 04:52:57.517025 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 04:52:57.520547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:52:57.542796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sc8vh" condition "Approved" to 2026-04-20 04:52:57.542780944 +0000 UTC m=+347.395701606 I0420 04:52:57.554703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sc8vh" condition "Ready" to 2026-04-20 04:52:57.554693066 +0000 UTC m=+347.407613718 I0420 04:52:57.571876 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:52:57.571865398 +0000 UTC m=+347.424786030 I0420 04:52:57.588162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:02.516845 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:02.516832 +0000 UTC m=+352.369752672 I0420 04:53:41.416879 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 04:53:41.416815597 +0000 UTC m=+391.269736229 I0420 04:53:41.416946 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:53:41.416967 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 04:53:41.41696108 +0000 UTC m=+391.269881712 I0420 04:53:41.417256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:53:41.417268 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 04:53:41.417266076 +0000 UTC m=+391.270186708 I0420 04:53:41.417274 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 04:53:41.417253796 +0000 UTC m=+391.270174428 I0420 04:53:41.421768 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 04:53:41.421761044 +0000 UTC m=+391.274681676 I0420 04:53:41.422020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:53:41.422037 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 04:53:41.422034181 +0000 UTC m=+391.274954813 I0420 04:53:41.453932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:41.453997 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 04:53:41.453991094 +0000 UTC m=+391.306911726 I0420 04:53:41.472580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:41.472632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:53:41.472648 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 04:53:41.472642453 +0000 UTC m=+391.325563085 I0420 04:53:41.491981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:41.492674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:53:41.492719 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 04:53:41.49270244 +0000 UTC m=+391.345623092 I0420 04:53:41.679409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zwm8m" condition "Approved" to 2026-04-20 04:53:41.679397578 +0000 UTC m=+391.532318220 I0420 04:53:41.704191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zwm8m" condition "Ready" to 2026-04-20 04:53:41.704182729 +0000 UTC m=+391.557103361 I0420 04:53:41.742475 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:41.742463277 +0000 UTC m=+391.595383909 I0420 04:53:41.761931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:41.766942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:41.798220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2768l" condition "Approved" to 2026-04-20 04:53:41.798211752 +0000 UTC m=+391.651132384 I0420 04:53:41.818102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2768l" condition "Ready" to 2026-04-20 04:53:41.818092745 +0000 UTC m=+391.671013377 I0420 04:53:41.878533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:41.918232 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:41.918220799 +0000 UTC m=+391.771141431 I0420 04:53:41.943409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:41.943650 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:41.943644432 +0000 UTC m=+391.796565064 I0420 04:53:42.084670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:42.181996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:42.386010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jtqb8" condition "Approved" to 2026-04-20 04:53:42.385993602 +0000 UTC m=+392.238914244 I0420 04:53:42.746629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jtqb8" condition "Ready" to 2026-04-20 04:53:42.746618903 +0000 UTC m=+392.599539535 I0420 04:53:42.934119 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:42.934107726 +0000 UTC m=+392.787028368 I0420 04:53:43.034637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:48.741277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:53:48.741325 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" condition "Issuing" to 2026-04-20 04:53:48.741314088 +0000 UTC m=+398.594234760 I0420 04:53:48.741358 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" condition "Ready" to 2026-04-20 04:53:48.741317548 +0000 UTC m=+398.594238210 I0420 04:53:48.757547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:48.757653 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" condition "Ready" to 2026-04-20 04:53:48.757643435 +0000 UTC m=+398.610564087 I0420 04:53:49.273620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:49.309448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5p4t5-jbrxq" condition "Approved" to 2026-04-20 04:53:49.30943455 +0000 UTC m=+399.162355202 I0420 04:53:49.341081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5p4t5-jbrxq" condition "Ready" to 2026-04-20 04:53:49.341065262 +0000 UTC m=+399.193985934 I0420 04:53:49.565639 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:49.56562968 +0000 UTC m=+399.418550322 I0420 04:53:49.673656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:49.674047 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:49.674040748 +0000 UTC m=+399.526961380 I0420 04:53:49.701872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:53:49.702304 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5p4t5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:53:49.702292145 +0000 UTC m=+399.555212807 I0420 04:54:01.903791 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 04:54:01.903779077 +0000 UTC m=+411.756699709 I0420 04:54:01.904399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:54:01.904477 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 04:54:01.90446623 +0000 UTC m=+411.757386892 I0420 04:54:01.922373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:54:01.922513 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 04:54:01.922494688 +0000 UTC m=+411.775415360 I0420 04:54:02.044739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:54:02.090367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vbhgt" condition "Approved" to 2026-04-20 04:54:02.090355787 +0000 UTC m=+411.943276409 I0420 04:54:02.117233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vbhgt" condition "Ready" to 2026-04-20 04:54:02.117217029 +0000 UTC m=+411.970137671 I0420 04:54:02.141589 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:54:02.141577025 +0000 UTC m=+411.994497647 I0420 04:54:02.162788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:54:02.163398 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:54:02.163392083 +0000 UTC m=+412.016312705 I0420 04:54:02.185238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:54:02.185523 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:54:02.185516945 +0000 UTC m=+412.038437577 I0420 04:57:10.013093 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 04:57:10.013053923 +0000 UTC m=+599.865974585 I0420 04:57:10.013115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:57:10.013515 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 04:57:10.013502589 +0000 UTC m=+599.866423251 I0420 04:57:10.027720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:57:10.027770 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:57:10.027784 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 04:57:10.027779218 +0000 UTC m=+599.880699850 I0420 04:57:10.159369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8p7xl" condition "Approved" to 2026-04-20 04:57:10.159360631 +0000 UTC m=+600.012281253 I0420 04:57:10.176987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8p7xl" condition "Ready" to 2026-04-20 04:57:10.176979365 +0000 UTC m=+600.029899987 I0420 04:57:10.205631 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:57:10.205616362 +0000 UTC m=+600.058537004 I0420 04:57:10.231898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:57:10.279726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:57:53.360343 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 04:57:53.360287017 +0000 UTC m=+643.213207689 I0420 04:57:53.360358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:57:53.360721 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 04:57:53.360706052 +0000 UTC m=+643.213626724 I0420 04:57:53.375455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:57:53.375756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 04:57:53.375933 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 04:57:53.375923257 +0000 UTC m=+643.228843929 I0420 04:57:53.531032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xg82b" condition "Approved" to 2026-04-20 04:57:53.531017623 +0000 UTC m=+643.383938245 I0420 04:57:53.548276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xg82b" condition "Ready" to 2026-04-20 04:57:53.548265994 +0000 UTC m=+643.401186636 I0420 04:57:53.575256 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:57:53.575245817 +0000 UTC m=+643.428166459 I0420 04:57:53.611049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 04:57:53.611229 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 04:57:53.611220242 +0000 UTC m=+643.464140874 I0420 04:57:53.633087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"