I0414 07:43:39.780024 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0414 07:43:39.780185 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0414 07:43:39.780276 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0414 07:43:39.783408 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0414 07:43:39.783752 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0414 07:43:39.784232 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0414 07:43:39.784299 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0414 07:43:39.786499 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0414 07:43:39.799149 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0414 07:43:39.806823 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0414 07:43:39.806898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0414 07:43:39.810230 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0414 07:43:39.812926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0414 07:43:39.814520 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0414 07:43:39.814536 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0414 07:43:39.814741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0414 07:43:39.816421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0414 07:43:39.818344 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0414 07:43:39.823657 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0414 07:43:39.826052 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0414 07:43:39.826092 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0414 07:43:39.828642 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0414 07:43:39.831127 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0414 07:43:39.833575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0414 07:43:39.836400 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0414 07:43:39.839602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0414 07:43:39.841432 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0414 07:43:39.841450 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0414 07:43:39.841512 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0414 07:43:39.843433 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0414 07:43:39.848047 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0414 07:43:39.850079 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0414 07:43:39.852217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0414 07:43:39.854927 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:43:39.855152 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:43:39.856766 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:43:39.857671 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:43:39.877877 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:43:39.897533 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:43:39.912560 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:43:39.928603 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:43:39.939336 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:43:39.946307 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 07:43:57.108306 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-14 07:43:57.108289234 +0000 UTC m=+17.368433106 I0414 07:43:57.984257 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 07:43:57.984234681 +0000 UTC m=+18.244378533 I0414 07:43:57.984287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:43:57.984739 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 07:43:57.984652514 +0000 UTC m=+18.244796366 E0414 07:43:58.002018 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 07:43:58.002132 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-14 07:43:58.002121096 +0000 UTC m=+18.262264998 E0414 07:43:58.002169 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 07:43:58.006213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:43:58.006383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:43:58.006409 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 07:43:58.006401863 +0000 UTC m=+18.266545715 E0414 07:43:58.012659 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0414 07:43:58.012976 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 07:43:58.013120 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 07:43:58.013259 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0414 07:43:58.042790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:43:58.051573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lzxdg" condition "Approved" to 2026-04-14 07:43:58.051562077 +0000 UTC m=+18.311705939 I0414 07:43:58.064687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lzxdg" condition "Ready" to 2026-04-14 07:43:58.064671895 +0000 UTC m=+18.324815757 I0414 07:43:58.090543 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:43:58.090526641 +0000 UTC m=+18.350670493 I0414 07:43:58.109633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:44:03.014686 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:44:03.014637686 +0000 UTC m=+23.274781628 I0414 07:44:28.403543 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-14 07:44:28.4035037 +0000 UTC m=+48.663647552 I0414 07:44:28.403893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:44:28.403941 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 07:44:28.403932539 +0000 UTC m=+48.664076391 I0414 07:44:28.422191 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-14 07:44:28.422180943 +0000 UTC m=+48.682324785 I0414 07:44:28.427955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:44:28.428068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:44:28.428149 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 07:44:28.428141135 +0000 UTC m=+48.688284987 I0414 07:44:28.757270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-m9hsh" condition "Approved" to 2026-04-14 07:44:28.757259675 +0000 UTC m=+49.017403527 I0414 07:44:28.805999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-m9hsh" condition "Ready" to 2026-04-14 07:44:28.805989473 +0000 UTC m=+49.066133315 I0414 07:44:28.843796 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:44:28.843781605 +0000 UTC m=+49.103925457 I0414 07:44:28.873598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:44:28.873778 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:44:28.873771689 +0000 UTC m=+49.133915531 I0414 07:44:28.901127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:44:28.902124 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:44:28.902113289 +0000 UTC m=+49.162257141 I0414 07:44:28.907025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:48:55.090319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-155.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:48:55.090417 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Issuing" to 2026-04-14 07:48:55.090369925 +0000 UTC m=+315.350513787 I0414 07:48:55.090936 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready" to 2026-04-14 07:48:55.090928988 +0000 UTC m=+315.351072850 I0414 07:48:55.115613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:48:55.115895 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready" to 2026-04-14 07:48:55.115885204 +0000 UTC m=+315.376029086 I0414 07:48:55.241860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:48:55.270181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-155.nip.io-tls-z8sqf" condition "Approved" to 2026-04-14 07:48:55.270172578 +0000 UTC m=+315.530316430 I0414 07:48:55.293650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-155.nip.io-tls-z8sqf" condition "Ready" to 2026-04-14 07:48:55.293640049 +0000 UTC m=+315.553783891 I0414 07:48:55.319822 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:48:55.319809194 +0000 UTC m=+315.579953036 I0414 07:48:55.339509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:48:55.339946 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:48:55.339938267 +0000 UTC m=+315.600082129 I0414 07:48:55.366157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:00.686439 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:50:00.686587 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 07:50:00.686546066 +0000 UTC m=+380.946689938 I0414 07:50:00.686585 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 07:50:00.686544796 +0000 UTC m=+380.946688678 E0414 07:50:00.706953 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 07:50:00.707010 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-14 07:50:00.706999365 +0000 UTC m=+380.967143247 E0414 07:50:00.707073 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 07:50:00.711740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:00.711830 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 07:50:00.711821377 +0000 UTC m=+380.971965229 E0414 07:50:00.762101 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0414 07:50:00.762253 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 07:50:00.762444 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 07:50:00.762540 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0414 07:50:00.792922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:00.834076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kpfr2" condition "Approved" to 2026-04-14 07:50:00.834062151 +0000 UTC m=+381.094206023 I0414 07:50:00.897491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kpfr2" condition "Ready" to 2026-04-14 07:50:00.897475137 +0000 UTC m=+381.157619009 I0414 07:50:00.983033 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:50:00.983020414 +0000 UTC m=+381.243164266 I0414 07:50:01.028240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:05.762960 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:50:05.762945245 +0000 UTC m=+386.023089127 I0414 07:50:46.095336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:50:46.095971 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 07:50:46.095963294 +0000 UTC m=+426.356107146 I0414 07:50:46.095978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:50:46.096336 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 07:50:46.09631873 +0000 UTC m=+426.356462572 I0414 07:50:46.095832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:50:46.096451 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 07:50:46.096431202 +0000 UTC m=+426.356575044 I0414 07:50:46.095886 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 07:50:46.095884102 +0000 UTC m=+426.356027944 I0414 07:50:46.095903 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 07:50:46.095901332 +0000 UTC m=+426.356045164 I0414 07:50:46.095713 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 07:50:46.095589837 +0000 UTC m=+426.355733679 I0414 07:50:46.146352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:46.146587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:46.146639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:46.146702 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 07:50:46.146695475 +0000 UTC m=+426.406839327 I0414 07:50:46.146713 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 07:50:46.146704355 +0000 UTC m=+426.406848197 I0414 07:50:46.146770 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 07:50:46.146763756 +0000 UTC m=+426.406907598 I0414 07:50:46.272685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:46.301237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rglvl" condition "Approved" to 2026-04-14 07:50:46.301221439 +0000 UTC m=+426.561365291 I0414 07:50:46.319740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rglvl" condition "Ready" to 2026-04-14 07:50:46.319728402 +0000 UTC m=+426.579872254 I0414 07:50:46.323057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:46.386493 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:50:46.386471136 +0000 UTC m=+426.646614978 I0414 07:50:46.386921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7kv9p" condition "Approved" to 2026-04-14 07:50:46.386910003 +0000 UTC m=+426.647053845 I0414 07:50:46.432081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:46.432943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7kv9p" condition "Ready" to 2026-04-14 07:50:46.432937435 +0000 UTC m=+426.693081277 I0414 07:50:46.433781 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:50:46.433776699 +0000 UTC m=+426.693920541 I0414 07:50:46.499716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:46.506996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:46.512495 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:50:46.512484756 +0000 UTC m=+426.772628598 I0414 07:50:46.668876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:47.008851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6xdm9" condition "Approved" to 2026-04-14 07:50:47.008836843 +0000 UTC m=+427.268980695 I0414 07:50:47.266152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6xdm9" condition "Ready" to 2026-04-14 07:50:47.266142773 +0000 UTC m=+427.526286615 I0414 07:50:47.758003 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-6xdm9" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-m9nn5" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0414 07:50:47.912566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gwbnk" condition "Approved" to 2026-04-14 07:50:47.912545815 +0000 UTC m=+428.172689737 I0414 07:50:48.177272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gwbnk" condition "Ready" to 2026-04-14 07:50:48.177257053 +0000 UTC m=+428.437400935 I0414 07:50:48.458802 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:50:48.458778773 +0000 UTC m=+428.718922625 I0414 07:50:48.782258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:48.782674 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:50:48.782655249 +0000 UTC m=+429.042799101 I0414 07:50:48.962144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:55.537577 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" condition "Ready" to 2026-04-14 07:50:55.537558674 +0000 UTC m=+435.797702526 I0414 07:50:55.537934 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:50:55.537963 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" condition "Issuing" to 2026-04-14 07:50:55.53795509 +0000 UTC m=+435.798098972 I0414 07:50:55.552874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:55.552942 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" condition "Ready" to 2026-04-14 07:50:55.552935379 +0000 UTC m=+435.813079231 I0414 07:50:55.709068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:55.738372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bxsp8-rvx2r" condition "Approved" to 2026-04-14 07:50:55.738358829 +0000 UTC m=+435.998502681 I0414 07:50:55.755432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bxsp8-rvx2r" condition "Ready" to 2026-04-14 07:50:55.755418063 +0000 UTC m=+436.015561935 I0414 07:50:55.787437 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:50:55.787416096 +0000 UTC m=+436.047559938 I0414 07:50:55.807789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:55.808282 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:50:55.808274214 +0000 UTC m=+436.068418066 I0414 07:50:55.818181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:50:55.829310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bxsp8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:51:13.405057 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 07:51:13.405033367 +0000 UTC m=+453.665177199 I0414 07:51:13.405278 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:51:13.405340 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 07:51:13.405326161 +0000 UTC m=+453.665470043 I0414 07:51:13.440442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:51:13.440517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:51:13.440553 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 07:51:13.440546139 +0000 UTC m=+453.700689981 I0414 07:51:13.594350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:51:13.599073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-psc4z" condition "Approved" to 2026-04-14 07:51:13.599063188 +0000 UTC m=+453.859207030 I0414 07:51:13.625372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-psc4z" condition "Ready" to 2026-04-14 07:51:13.625359211 +0000 UTC m=+453.885503063 I0414 07:51:13.669408 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:51:13.669394129 +0000 UTC m=+453.929537981 I0414 07:51:13.691707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:51:13.809650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:54:29.829947 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-14 07:54:29.829917458 +0000 UTC m=+650.090061300 I0414 07:54:29.830393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:54:29.830463 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 07:54:29.830456105 +0000 UTC m=+650.090599957 I0414 07:54:29.850908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:54:29.851084 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-14 07:54:29.851073966 +0000 UTC m=+650.111217818 I0414 07:54:30.048555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:54:30.075640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wz957" condition "Approved" to 2026-04-14 07:54:30.075629238 +0000 UTC m=+650.335773090 I0414 07:54:30.101284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wz957" condition "Ready" to 2026-04-14 07:54:30.101271194 +0000 UTC m=+650.361415066 I0414 07:54:30.141357 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:54:30.141343129 +0000 UTC m=+650.401486981 I0414 07:54:30.161922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:55:11.059231 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:55:11.059273 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 07:55:11.059265145 +0000 UTC m=+691.319408997 I0414 07:55:11.060447 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 07:55:11.059133173 +0000 UTC m=+691.319277025 I0414 07:55:11.077619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 07:55:11.077688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 07:55:11.077711 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 07:55:11.077704702 +0000 UTC m=+691.337848554 I0414 07:55:11.458717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xk6hl" condition "Approved" to 2026-04-14 07:55:11.458704919 +0000 UTC m=+691.718848781 I0414 07:55:11.519548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xk6hl" condition "Ready" to 2026-04-14 07:55:11.519539882 +0000 UTC m=+691.779683724 I0414 07:55:11.547168 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 07:55:11.547150768 +0000 UTC m=+691.807294650 I0414 07:55:11.592502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"