I0409 17:36:21.295208 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 17:36:21.295314 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 17:36:21.295379 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 17:36:21.298938 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 17:36:21.299386 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 17:36:21.299566 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 17:36:21.299461 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 17:36:21.306174 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 17:36:21.318355 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 17:36:21.318710 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 17:36:21.323653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 17:36:21.327409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 17:36:21.330608 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 17:36:21.335293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 17:36:21.337263 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 17:36:21.338849 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 17:36:21.338959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 17:36:21.340684 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 17:36:21.342360 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 17:36:21.342377 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 17:36:21.342556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 17:36:21.344431 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 17:36:21.344462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 17:36:21.346282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 17:36:21.350738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 17:36:21.356171 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 17:36:21.359176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 17:36:21.361991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 17:36:21.365324 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 17:36:21.369426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 17:36:21.373452 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 17:36:21.375196 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 17:36:21.375488 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 17:36:21.380691 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:21.381156 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:21.384117 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:21.385111 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:21.401639 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:21.415915 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:21.432222 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:21.447624 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:21.458707 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:21.462699 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:37:31.513952 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 17:37:31.513917255 +0000 UTC m=+70.255475143 I0409 17:37:32.225562 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:37:32.225650 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 17:37:32.225639863 +0000 UTC m=+70.967197751 I0409 17:37:32.227012 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 17:37:32.227003978 +0000 UTC m=+70.968561866 E0409 17:37:32.243593 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:37:32.243684 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 17:37:32.243674152 +0000 UTC m=+70.985232030 E0409 17:37:32.243717 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:37:32.247816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:37:32.248044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:37:32.248150 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 17:37:32.248074936 +0000 UTC m=+70.989632844 E0409 17:37:32.255368 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 17:37:32.255489 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:37:32.255558 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:37:32.255596 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 17:37:32.298597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:37:32.303471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lnr7q" condition "Approved" to 2026-04-09 17:37:32.303461504 +0000 UTC m=+71.045019382 I0409 17:37:32.323039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lnr7q" condition "Ready" to 2026-04-09 17:37:32.323027913 +0000 UTC m=+71.064585801 I0409 17:37:32.348501 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:37:32.348466014 +0000 UTC m=+71.090023912 I0409 17:37:32.369042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:37:32.370373 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:37:32.370354749 +0000 UTC m=+71.111912627 I0409 17:37:32.387725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:37:37.256706 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:37:37.256692052 +0000 UTC m=+75.998249970 I0409 17:39:13.865151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:39:13.865745 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 17:39:13.865736003 +0000 UTC m=+172.607293881 I0409 17:39:13.865159 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 17:39:13.865117273 +0000 UTC m=+172.606675181 I0409 17:39:14.032808 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 17:39:14.032797384 +0000 UTC m=+172.774355252 I0409 17:39:14.035823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:39:14.035911 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 17:39:14.035904623 +0000 UTC m=+172.777462501 I0409 17:39:15.373043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:39:15.665308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wgtw7" condition "Approved" to 2026-04-09 17:39:15.665286072 +0000 UTC m=+174.406844060 I0409 17:39:15.894018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wgtw7" condition "Ready" to 2026-04-09 17:39:15.894006895 +0000 UTC m=+174.635564783 I0409 17:39:16.508685 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:39:16.508661173 +0000 UTC m=+175.250219101 I0409 17:39:16.652723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:39:17.138236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:45:46.627804 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-159.nip.io-tls" condition "Ready" to 2026-04-09 17:45:46.62778153 +0000 UTC m=+565.369339458 I0409 17:45:46.627872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-159.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:45:46.628306 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-159.nip.io-tls" condition "Issuing" to 2026-04-09 17:45:46.628298937 +0000 UTC m=+565.369856815 I0409 17:45:46.645492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-159.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-159.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:45:46.645559 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-159.nip.io-tls" condition "Ready" to 2026-04-09 17:45:46.645552007 +0000 UTC m=+565.387109895 I0409 17:45:46.954771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-159.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-159.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:45:46.982888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-159.nip.io-tls-x6z6g" condition "Approved" to 2026-04-09 17:45:46.982877917 +0000 UTC m=+565.724435795 I0409 17:45:47.008589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-159.nip.io-tls-x6z6g" condition "Ready" to 2026-04-09 17:45:47.008573682 +0000 UTC m=+565.750131590 I0409 17:45:47.031724 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-159.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:45:47.031711487 +0000 UTC m=+565.773269365 I0409 17:45:47.059367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-159.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-159.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:45:47.059725 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-159.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:45:47.059717975 +0000 UTC m=+565.801275863 I0409 17:45:47.076987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-159.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-159.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:46:51.169785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:46:51.169855 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 17:46:51.169845296 +0000 UTC m=+629.911403184 I0409 17:46:51.170354 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 17:46:51.170349202 +0000 UTC m=+629.911907090 E0409 17:46:51.182786 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:46:51.182815 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 17:46:51.182809602 +0000 UTC m=+629.924367480 E0409 17:46:51.182850 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:46:51.188467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:46:51.188539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:46:51.188556 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 17:46:51.188549762 +0000 UTC m=+629.930107650 E0409 17:46:51.191528 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0409 17:46:51.191601 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:46:51.191627 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:46:51.191660 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0409 17:46:51.223619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5lcxr" condition "Approved" to 2026-04-09 17:46:51.22360879 +0000 UTC m=+629.965166678 I0409 17:46:51.235303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5lcxr" condition "Ready" to 2026-04-09 17:46:51.235293365 +0000 UTC m=+629.976851263 I0409 17:46:51.256025 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:46:51.256010504 +0000 UTC m=+629.997568392 I0409 17:46:51.273918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:46:51.274474 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:46:51.274467182 +0000 UTC m=+630.016025060 I0409 17:46:51.288528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:46:56.191977 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:46:56.191929075 +0000 UTC m=+634.933486983 I0409 17:47:37.370132 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 17:47:37.370092785 +0000 UTC m=+676.111650663 I0409 17:47:37.371014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:47:37.371057 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 17:47:37.371048935 +0000 UTC m=+676.112606813 I0409 17:47:37.372304 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 17:47:37.372297734 +0000 UTC m=+676.113855612 I0409 17:47:37.372612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:47:37.372634 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 17:47:37.372630995 +0000 UTC m=+676.114188863 I0409 17:47:37.378099 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 17:47:37.378090065 +0000 UTC m=+676.119647943 I0409 17:47:37.378152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:47:37.378183 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 17:47:37.378177318 +0000 UTC m=+676.119735196 I0409 17:47:37.414204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:37.414246 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 17:47:37.414240787 +0000 UTC m=+676.155798665 I0409 17:47:37.425725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:37.425795 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:47:37.425817 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 17:47:37.425811289 +0000 UTC m=+676.167369167 I0409 17:47:37.426238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:37.426312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:47:37.426335 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 17:47:37.426331045 +0000 UTC m=+676.167888923 I0409 17:47:37.589344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-s8fpz" condition "Approved" to 2026-04-09 17:47:37.588333073 +0000 UTC m=+676.329890961 I0409 17:47:37.606419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:37.608291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-s8fpz" condition "Ready" to 2026-04-09 17:47:37.608281937 +0000 UTC m=+676.349839825 I0409 17:47:37.637361 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:37.637348177 +0000 UTC m=+676.378906065 I0409 17:47:37.650213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z8lt9" condition "Approved" to 2026-04-09 17:47:37.650202609 +0000 UTC m=+676.391760497 I0409 17:47:37.669394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z8lt9" condition "Ready" to 2026-04-09 17:47:37.669384349 +0000 UTC m=+676.410942227 I0409 17:47:37.669626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:37.669936 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:37.669930396 +0000 UTC m=+676.411488284 I0409 17:47:37.700396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:37.700783 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:37.700774851 +0000 UTC m=+676.442332729 I0409 17:47:37.750538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:37.805102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rmf95" condition "Approved" to 2026-04-09 17:47:37.805087875 +0000 UTC m=+676.546645753 I0409 17:47:37.850524 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:37.850513567 +0000 UTC m=+676.592071445 I0409 17:47:38.008571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rmf95" condition "Ready" to 2026-04-09 17:47:38.008562342 +0000 UTC m=+676.750120220 I0409 17:47:38.351938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:38.352535 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:38.352524815 +0000 UTC m=+677.094082723 I0409 17:47:38.761262 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:38.761248004 +0000 UTC m=+677.502805882 I0409 17:47:38.805780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:38.851634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:38.962309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:38.962659 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:38.962652626 +0000 UTC m=+677.704210504 I0409 17:47:39.250247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:45.938893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:47:45.938925 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" condition "Issuing" to 2026-04-09 17:47:45.938917624 +0000 UTC m=+684.680475512 I0409 17:47:45.939414 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" condition "Ready" to 2026-04-09 17:47:45.939408339 +0000 UTC m=+684.680966227 I0409 17:47:45.952577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:45.952665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:47:45.952698 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" condition "Issuing" to 2026-04-09 17:47:45.952690495 +0000 UTC m=+684.694248383 I0409 17:47:46.068301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:46.074294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-b6p5v-bhjrt" condition "Approved" to 2026-04-09 17:47:46.074280979 +0000 UTC m=+684.815838857 I0409 17:47:46.090513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-b6p5v-bhjrt" condition "Ready" to 2026-04-09 17:47:46.090504217 +0000 UTC m=+684.832062095 I0409 17:47:46.118987 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:46.118974358 +0000 UTC m=+684.860532236 I0409 17:47:46.148263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:46.148734 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:46.148726328 +0000 UTC m=+684.890284206 I0409 17:47:46.173047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:46.173404 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6p5v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:46.173397521 +0000 UTC m=+684.914955419 I0409 17:48:02.556917 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 17:48:02.55688779 +0000 UTC m=+701.298445708 I0409 17:48:02.557238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:48:02.557271 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 17:48:02.557262572 +0000 UTC m=+701.298820490 I0409 17:48:02.597017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:48:02.597253 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 17:48:02.597241481 +0000 UTC m=+701.338799389 I0409 17:48:03.016962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:48:03.048558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v2wvv" condition "Approved" to 2026-04-09 17:48:03.048545659 +0000 UTC m=+701.790103537 I0409 17:48:03.071230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v2wvv" condition "Ready" to 2026-04-09 17:48:03.071219049 +0000 UTC m=+701.812776927 I0409 17:48:03.115911 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:48:03.115893566 +0000 UTC m=+701.857451454 I0409 17:48:03.137438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:51:16.146935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:51:16.146997 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 17:51:16.146991225 +0000 UTC m=+894.888549103 I0409 17:51:16.147532 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 17:51:16.146772838 +0000 UTC m=+894.888330756 I0409 17:51:16.167510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:51:16.167740 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 17:51:16.167731692 +0000 UTC m=+894.909289590 I0409 17:51:16.277879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:51:16.319683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2f5nj" condition "Approved" to 2026-04-09 17:51:16.3196707 +0000 UTC m=+895.061228578 I0409 17:51:16.347624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2f5nj" condition "Ready" to 2026-04-09 17:51:16.347609793 +0000 UTC m=+895.089167681 I0409 17:51:16.374994 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:51:16.374978478 +0000 UTC m=+895.116536366 I0409 17:51:16.408948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:51:16.409985 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:51:16.409976431 +0000 UTC m=+895.151534319 I0409 17:51:16.434930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:51:16.435485 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:51:16.435474018 +0000 UTC m=+895.177031916 I0409 17:51:57.217058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:51:57.217138 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 17:51:57.217096799 +0000 UTC m=+935.958654687 I0409 17:51:57.217945 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-09 17:51:57.217937126 +0000 UTC m=+935.959495014 I0409 17:51:57.234095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:51:57.234150 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:51:57.234165 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 17:51:57.234159883 +0000 UTC m=+935.975717761 I0409 17:51:57.394679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:51:57.396715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9w2vd" condition "Approved" to 2026-04-09 17:51:57.3967011 +0000 UTC m=+936.138259008 I0409 17:51:57.417377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9w2vd" condition "Ready" to 2026-04-09 17:51:57.417368036 +0000 UTC m=+936.158925914 I0409 17:51:57.446603 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:51:57.446590689 +0000 UTC m=+936.188148567 I0409 17:51:57.469697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"