I0427 20:57:40.240236 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0427 20:57:40.240357 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0427 20:57:40.240556 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 20:57:40.246059 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0427 20:57:40.246458 1 controller.go:156] "cert-manager/controller: starting leader election" I0427 20:57:40.246624 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0427 20:57:40.246665 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0427 20:57:40.249297 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 20:57:40.263791 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0427 20:57:40.268556 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0427 20:57:40.273326 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0427 20:57:40.277573 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0427 20:57:40.282968 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0427 20:57:40.287858 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0427 20:57:40.291304 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0427 20:57:40.293183 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0427 20:57:40.294929 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0427 20:57:40.294987 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0427 20:57:40.296826 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0427 20:57:40.298547 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0427 20:57:40.300586 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0427 20:57:40.302155 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0427 20:57:40.305048 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0427 20:57:40.305130 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0427 20:57:40.305330 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0427 20:57:40.305977 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0427 20:57:40.311281 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0427 20:57:40.314141 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0427 20:57:40.316792 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0427 20:57:40.319610 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0427 20:57:40.319640 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0427 20:57:40.319674 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0427 20:57:40.322980 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0427 20:57:52.667734 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 20:57:52.6676909 +0000 UTC m=+12.463878426 I0427 20:57:53.411766 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 20:57:53.411856 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 20:57:53.411845734 +0000 UTC m=+13.208033280 I0427 20:57:53.411908 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 20:57:53.411885257 +0000 UTC m=+13.208072813 E0427 20:57:53.426631 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 20:57:53.426808 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 20:57:53.426720115 +0000 UTC m=+13.222907641 E0427 20:57:53.427000 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 20:57:53.430090 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 20:57:53.430151 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 20:57:53.430144186 +0000 UTC m=+13.226331712 E0427 20:57:53.441240 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0427 20:57:53.441412 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 20:57:53.441511 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 20:57:53.441551 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0427 20:57:53.449604 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 20:57:53.473413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5kkqf" condition "Approved" to 2026-04-27 20:57:53.47339053 +0000 UTC m=+13.269578086 I0427 20:57:53.486589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5kkqf" condition "Ready" to 2026-04-27 20:57:53.486575856 +0000 UTC m=+13.282763382 I0427 20:57:53.509888 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 20:57:53.509869155 +0000 UTC m=+13.306056701 I0427 20:57:53.529085 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 20:57:53.530047 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 20:57:53.530037271 +0000 UTC m=+13.326224797 I0427 20:57:53.548763 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 20:57:53.548983 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 20:57:53.549161 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 20:57:53.549152111 +0000 UTC m=+13.345339627 I0427 20:57:58.442620 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 20:57:58.442600984 +0000 UTC m=+18.238788530 I0427 20:58:19.835528 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 20:58:19.835481048 +0000 UTC m=+39.631668574 I0427 20:58:19.835799 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 20:58:19.835880 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 20:58:19.835841789 +0000 UTC m=+39.632029335 I0427 20:58:19.849481 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 20:58:19.849397015 +0000 UTC m=+39.645584571 I0427 20:58:19.877203 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 20:58:19.877278 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 20:58:19.877272064 +0000 UTC m=+39.673459570 I0427 20:58:20.093832 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 20:58:20.135492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7mplg" condition "Approved" to 2026-04-27 20:58:20.135476428 +0000 UTC m=+39.931664014 I0427 20:58:20.172547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7mplg" condition "Ready" to 2026-04-27 20:58:20.17253365 +0000 UTC m=+39.968721176 I0427 20:58:20.216767 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 20:58:20.216754161 +0000 UTC m=+40.012941677 I0427 20:58:20.248832 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 20:58:20.249420 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 20:58:20.249413772 +0000 UTC m=+40.045601298 I0427 20:58:20.270884 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 20:58:20.271459 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 20:58:20.271450747 +0000 UTC m=+40.067638273 I0427 20:58:20.273615 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:01:03.350207 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-180.nip.io-tls" condition "Ready" to 2026-04-27 21:01:03.35016615 +0000 UTC m=+203.146353656 I0427 21:01:03.350327 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-180.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:01:03.350507 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-180.nip.io-tls" condition "Issuing" to 2026-04-27 21:01:03.350435883 +0000 UTC m=+203.146623419 I0427 21:01:03.368506 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-180.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-180.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:01:03.368606 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-180.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:01:03.368640 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-180.nip.io-tls" condition "Issuing" to 2026-04-27 21:01:03.368633353 +0000 UTC m=+203.164820879 I0427 21:01:03.518473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-180.nip.io-tls-twpng" condition "Approved" to 2026-04-27 21:01:03.518458249 +0000 UTC m=+203.314645775 I0427 21:01:03.544316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-180.nip.io-tls-twpng" condition "Ready" to 2026-04-27 21:01:03.544304515 +0000 UTC m=+203.340492041 I0427 21:01:03.581274 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-180.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:01:03.581261218 +0000 UTC m=+203.377448724 I0427 21:01:03.596368 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-180.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-180.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:01:03.596747 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-180.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:01:03.596744439 +0000 UTC m=+203.392931955 I0427 21:01:03.615097 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-180.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-180.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:01:03.618577 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-180.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-180.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:01:59.264915 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 21:01:59.26487642 +0000 UTC m=+259.061063946 I0427 21:01:59.265424 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:01:59.265484 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 21:01:59.265480561 +0000 UTC m=+259.061668077 E0427 21:01:59.279102 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 21:01:59.279141 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 21:01:59.279132839 +0000 UTC m=+259.075320395 E0427 21:01:59.279256 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 21:01:59.281413 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:01:59.281599 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:01:59.281681 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 21:01:59.281672191 +0000 UTC m=+259.077859717 E0427 21:01:59.292320 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0427 21:01:59.292373 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 21:01:59.292426 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 21:01:59.292459 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0427 21:01:59.321764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s5kwl" condition "Approved" to 2026-04-27 21:01:59.321739934 +0000 UTC m=+259.117927550 I0427 21:01:59.337749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s5kwl" condition "Ready" to 2026-04-27 21:01:59.337729068 +0000 UTC m=+259.133916624 I0427 21:01:59.361932 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:01:59.361887983 +0000 UTC m=+259.158075509 I0427 21:01:59.381208 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:01:59.381481 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:01:59.381472247 +0000 UTC m=+259.177659783 I0427 21:01:59.395540 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:01:59.396781 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:01:59.396960 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:01:59.396951788 +0000 UTC m=+259.193139304 I0427 21:01:59.399834 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:04.292670 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:02:04.292652062 +0000 UTC m=+264.088839608 I0427 21:02:43.336497 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:02:43.336541 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 21:02:43.336518634 +0000 UTC m=+303.132706150 I0427 21:02:43.336648 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 21:02:43.33664522 +0000 UTC m=+303.132832736 I0427 21:02:43.345211 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 21:02:43.345199944 +0000 UTC m=+303.141387490 I0427 21:02:43.345297 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:02:43.345332 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 21:02:43.34532657 +0000 UTC m=+303.141514086 I0427 21:02:43.345684 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 21:02:43.345680107 +0000 UTC m=+303.141867623 I0427 21:02:43.345811 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:02:43.345825 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 21:02:43.345822614 +0000 UTC m=+303.142010120 I0427 21:02:43.404755 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:43.404894 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:02:43.404916 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 21:02:43.404909563 +0000 UTC m=+303.201097089 I0427 21:02:43.409318 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:43.409360 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:02:43.409389 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 21:02:43.409377009 +0000 UTC m=+303.205564535 I0427 21:02:43.414914 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:43.415543 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 21:02:43.415537617 +0000 UTC m=+303.211725133 I0427 21:02:43.637361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rrtjw" condition "Approved" to 2026-04-27 21:02:43.637343038 +0000 UTC m=+303.433530594 I0427 21:02:43.664191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rrtjw" condition "Ready" to 2026-04-27 21:02:43.664180997 +0000 UTC m=+303.460368523 I0427 21:02:43.697367 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:02:43.697357162 +0000 UTC m=+303.493544678 I0427 21:02:43.704485 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:43.720005 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:43.720491 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:02:43.720483321 +0000 UTC m=+303.516670837 I0427 21:02:43.763472 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:43.765721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nngjs" condition "Approved" to 2026-04-27 21:02:43.765704049 +0000 UTC m=+303.561891565 I0427 21:02:43.768331 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:43.768936 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0427 21:02:43.782080 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"grafana-tls-wlxrb\" not found" key="monitoring/grafana-tls" I0427 21:02:43.783227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-84sgp" condition "Approved" to 2026-04-27 21:02:43.783217066 +0000 UTC m=+303.579404582 I0427 21:02:43.788135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nngjs" condition "Ready" to 2026-04-27 21:02:43.788127853 +0000 UTC m=+303.584315379 I0427 21:02:43.821084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-84sgp" condition "Ready" to 2026-04-27 21:02:43.821065487 +0000 UTC m=+303.617253013 I0427 21:02:44.466025 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:02:44.466007465 +0000 UTC m=+304.262195011 I0427 21:02:44.513544 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:02:44.513515432 +0000 UTC m=+304.309702988 I0427 21:02:44.656671 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:44.657521 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:02:44.657510653 +0000 UTC m=+304.453698209 I0427 21:02:44.767857 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:44.769291 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:02:44.769269676 +0000 UTC m=+304.565457202 I0427 21:02:45.161529 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:45.206293 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:45.258150 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:50.229869 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls" condition "Ready" to 2026-04-27 21:02:50.229832946 +0000 UTC m=+310.026020472 I0427 21:02:50.230359 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:02:50.230377 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls" condition "Issuing" to 2026-04-27 21:02:50.2303738 +0000 UTC m=+310.026561326 I0427 21:02:50.244816 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:50.244926 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls" condition "Ready" to 2026-04-27 21:02:50.244914297 +0000 UTC m=+310.041101823 I0427 21:02:50.362821 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:02:50.392569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xlk6x-s7tnd" condition "Approved" to 2026-04-27 21:02:50.39255387 +0000 UTC m=+310.188741416 I0427 21:02:50.412375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xlk6x-s7tnd" condition "Ready" to 2026-04-27 21:02:50.412361647 +0000 UTC m=+310.208549173 I0427 21:02:50.438083 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:02:50.438074994 +0000 UTC m=+310.234262520 I0427 21:02:50.459498 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xlk6x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:03:04.678789 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:03:04.678830 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 21:03:04.678813499 +0000 UTC m=+324.475001025 I0427 21:03:04.678828 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 21:03:04.678786848 +0000 UTC m=+324.474974404 I0427 21:03:04.697597 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:03:04.697718 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 21:03:04.69770751 +0000 UTC m=+324.493895066 I0427 21:03:04.790140 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:03:04.819914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-snx8j" condition "Approved" to 2026-04-27 21:03:04.819901173 +0000 UTC m=+324.616088689 I0427 21:03:04.847326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-snx8j" condition "Ready" to 2026-04-27 21:03:04.847310985 +0000 UTC m=+324.643498501 I0427 21:03:04.872315 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:03:04.872302992 +0000 UTC m=+324.668490508 I0427 21:03:04.891746 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:03:04.956846 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:06:07.016544 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 21:06:07.016507345 +0000 UTC m=+506.812694891 I0427 21:06:07.017763 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:06:07.017847 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 21:06:07.017830759 +0000 UTC m=+506.814018315 I0427 21:06:07.032463 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:06:07.032560 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:06:07.032591 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 21:06:07.032581702 +0000 UTC m=+506.828769248 I0427 21:06:07.330537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mwmlt" condition "Approved" to 2026-04-27 21:06:07.330521359 +0000 UTC m=+507.126708875 I0427 21:06:07.349994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mwmlt" condition "Ready" to 2026-04-27 21:06:07.34998431 +0000 UTC m=+507.146171826 I0427 21:06:07.383928 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:06:07.38391578 +0000 UTC m=+507.180103306 I0427 21:06:07.404921 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:06:07.405498 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:06:07.40549091 +0000 UTC m=+507.201678436 I0427 21:06:07.426011 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:06:07.426398 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:06:46.262878 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 21:06:46.26281819 +0000 UTC m=+546.059005736 I0427 21:06:46.263744 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:06:46.263778 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 21:06:46.263769837 +0000 UTC m=+546.059957343 I0427 21:06:46.293964 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:06:46.294181 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 21:06:46.294263 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 21:06:46.294252966 +0000 UTC m=+546.090440492 I0427 21:06:46.866195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xxfh8" condition "Approved" to 2026-04-27 21:06:46.86618278 +0000 UTC m=+546.662370296 I0427 21:06:46.884172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xxfh8" condition "Ready" to 2026-04-27 21:06:46.884162789 +0000 UTC m=+546.680350305 I0427 21:06:46.916120 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:06:46.916104702 +0000 UTC m=+546.712292258 I0427 21:06:46.940674 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:06:46.941027 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:06:46.941022315 +0000 UTC m=+546.737209831 I0427 21:06:46.965342 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 21:06:46.965793 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 21:06:46.96578811 +0000 UTC m=+546.761975616