I0408 01:17:21.685882 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 01:17:21.685976 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 01:17:21.686058 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 01:17:21.689222 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 01:17:21.689573 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 01:17:21.689658 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 01:17:21.689768 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 01:17:21.692037 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 01:17:21.706251 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 01:17:21.713569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 01:17:21.716387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 01:17:21.719086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 01:17:21.721819 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 01:17:21.723571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 01:17:21.725257 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 01:17:21.725280 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 01:17:21.725292 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 01:17:21.730840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 01:17:21.734321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 01:17:21.736071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 01:17:21.737768 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 01:17:21.737786 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 01:17:21.737882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 01:17:21.739694 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 01:17:21.743335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 01:17:21.746813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 01:17:21.753112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 01:17:21.755947 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 01:17:21.756056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 01:17:21.759622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 01:17:21.762053 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 01:17:21.764536 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 01:17:21.764569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 01:17:21.766956 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:17:21.767599 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:17:21.768308 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:17:21.769039 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:17:21.769103 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:17:21.769358 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:17:21.769670 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:17:21.769856 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:17:21.770568 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:17:21.854350 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:17:33.295570 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 01:17:33.295557344 +0000 UTC m=+11.651671033 I0408 01:17:34.003844 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 01:17:34.003826618 +0000 UTC m=+12.359940347 I0408 01:17:34.004352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:17:34.004430 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 01:17:34.004417928 +0000 UTC m=+12.360531677 E0408 01:17:34.022785 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:17:34.022854 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 01:17:34.022847434 +0000 UTC m=+12.378961123 E0408 01:17:34.022879 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:17:34.025692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:17:34.025780 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 01:17:34.025774145 +0000 UTC m=+12.381887834 E0408 01:17:34.038420 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 01:17:34.038556 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:17:34.038670 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:17:34.038741 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 01:17:34.041916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:17:34.041963 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 01:17:34.041956373 +0000 UTC m=+12.398070062 I0408 01:17:34.043676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w9wbj" condition "Approved" to 2026-04-08 01:17:34.043670772 +0000 UTC m=+12.399784441 I0408 01:17:34.058534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w9wbj" condition "Ready" to 2026-04-08 01:17:34.058519814 +0000 UTC m=+12.414633523 I0408 01:17:34.080774 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:17:34.0807634 +0000 UTC m=+12.436877089 I0408 01:17:34.093904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:17:34.094151 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:17:34.094144642 +0000 UTC m=+12.450258331 I0408 01:17:34.113449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:17:39.039573 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:17:39.039554315 +0000 UTC m=+17.395668034 I0408 01:17:59.662256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:17:59.662350 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 01:17:59.6623426 +0000 UTC m=+38.018456289 I0408 01:17:59.662527 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 01:17:59.662514805 +0000 UTC m=+38.018628494 I0408 01:17:59.672482 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 01:17:59.672464824 +0000 UTC m=+38.028578503 I0408 01:17:59.701714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:17:59.706125 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 01:17:59.706114963 +0000 UTC m=+38.062228662 I0408 01:17:59.987013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:18:00.017032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bpcvv" condition "Approved" to 2026-04-08 01:18:00.017024457 +0000 UTC m=+38.373138136 I0408 01:18:00.045486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bpcvv" condition "Ready" to 2026-04-08 01:18:00.045474318 +0000 UTC m=+38.401588017 I0408 01:18:00.073698 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:18:00.073687833 +0000 UTC m=+38.429801522 I0408 01:18:00.099424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:18:00.100062 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:18:00.100055659 +0000 UTC m=+38.456169348 I0408 01:18:00.121047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:18:00.123066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:18:00.123467 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:18:00.123459406 +0000 UTC m=+38.479573095 I0408 01:22:02.645568 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-04-08 01:22:02.645548486 +0000 UTC m=+281.001662205 I0408 01:22:02.645596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:22:02.645983 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-04-08 01:22:02.645974314 +0000 UTC m=+281.002088003 I0408 01:22:02.661552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:22:02.661606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:22:02.661625 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-04-08 01:22:02.661618797 +0000 UTC m=+281.017732486 I0408 01:22:02.888306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-zt5dk" condition "Approved" to 2026-04-08 01:22:02.88829169 +0000 UTC m=+281.244405399 I0408 01:22:02.958002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-zt5dk" condition "Ready" to 2026-04-08 01:22:02.957987787 +0000 UTC m=+281.314101466 I0408 01:22:02.991292 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:22:02.991282397 +0000 UTC m=+281.347396076 I0408 01:22:03.013002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:22:03.013281 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:22:03.013273857 +0000 UTC m=+281.369387546 I0408 01:22:03.032267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:13.734540 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 01:23:13.734520836 +0000 UTC m=+352.090634545 I0408 01:23:13.735654 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:23:13.735686 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 01:23:13.73567916 +0000 UTC m=+352.091792869 E0408 01:23:13.749036 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:23:13.749068 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 01:23:13.749063949 +0000 UTC m=+352.105177628 E0408 01:23:13.749101 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:23:13.752496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:13.752545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:23:13.752568 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 01:23:13.752562873 +0000 UTC m=+352.108676572 E0408 01:23:13.758562 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 01:23:13.758621 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:23:13.758638 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:23:13.758668 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 01:23:13.793859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vrtt2" condition "Approved" to 2026-04-08 01:23:13.793848213 +0000 UTC m=+352.149961882 I0408 01:23:13.806610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vrtt2" condition "Ready" to 2026-04-08 01:23:13.806596923 +0000 UTC m=+352.162710612 I0408 01:23:13.830182 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:23:13.830168565 +0000 UTC m=+352.186282244 I0408 01:23:13.848132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:18.759476 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:23:18.759457075 +0000 UTC m=+357.115570784 I0408 01:24:01.395093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:24:01.395129 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 01:24:01.395121692 +0000 UTC m=+399.751235381 I0408 01:24:01.395821 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 01:24:01.395810169 +0000 UTC m=+399.751923858 I0408 01:24:01.396097 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 01:24:01.396092716 +0000 UTC m=+399.752206405 I0408 01:24:01.396257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:24:01.396273 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 01:24:01.39627027 +0000 UTC m=+399.752383959 I0408 01:24:01.407498 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 01:24:01.407488023 +0000 UTC m=+399.763601732 I0408 01:24:01.407796 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:24:01.407819 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 01:24:01.407813042 +0000 UTC m=+399.763926721 I0408 01:24:01.438247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:01.438781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:24:01.438805 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 01:24:01.438799125 +0000 UTC m=+399.794912804 I0408 01:24:01.440480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:01.440521 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 01:24:01.440517598 +0000 UTC m=+399.796631267 I0408 01:24:01.452780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:01.452817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:24:01.452986 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 01:24:01.452980813 +0000 UTC m=+399.809094482 I0408 01:24:01.591777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:01.622113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pgpzd" condition "Approved" to 2026-04-08 01:24:01.622093965 +0000 UTC m=+399.978207654 I0408 01:24:01.626939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:01.633123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8qmd7" condition "Approved" to 2026-04-08 01:24:01.633114213 +0000 UTC m=+399.989227882 I0408 01:24:01.640853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pgpzd" condition "Ready" to 2026-04-08 01:24:01.640845629 +0000 UTC m=+399.996959318 I0408 01:24:01.652869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8qmd7" condition "Ready" to 2026-04-08 01:24:01.652860542 +0000 UTC m=+400.008974221 I0408 01:24:01.686347 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:01.686323367 +0000 UTC m=+400.042437076 I0408 01:24:01.694396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xmdsk" condition "Approved" to 2026-04-08 01:24:01.694380421 +0000 UTC m=+400.050494100 I0408 01:24:01.712278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:01.712483 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:01.712478307 +0000 UTC m=+400.068591986 I0408 01:24:01.729305 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:01.729290802 +0000 UTC m=+400.085404481 I0408 01:24:01.836034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xmdsk" condition "Ready" to 2026-04-08 01:24:01.836021508 +0000 UTC m=+400.192135197 I0408 01:24:02.276219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:02.276749 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:02.27672942 +0000 UTC m=+400.632843099 I0408 01:24:02.525219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:02.674610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:02.743973 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:02.743957675 +0000 UTC m=+401.100071364 I0408 01:24:02.930280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:09.160291 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" condition "Ready" to 2026-04-08 01:24:09.160205371 +0000 UTC m=+407.516319080 I0408 01:24:09.160868 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:24:09.160924 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" condition "Issuing" to 2026-04-08 01:24:09.160909568 +0000 UTC m=+407.517023287 I0408 01:24:09.195103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k86r9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:09.195287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:24:09.195346 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" condition "Issuing" to 2026-04-08 01:24:09.195333777 +0000 UTC m=+407.551447486 I0408 01:24:09.419999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-k86r9-wj7ng" condition "Approved" to 2026-04-08 01:24:09.419982296 +0000 UTC m=+407.776095985 I0408 01:24:09.442449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-k86r9-wj7ng" condition "Ready" to 2026-04-08 01:24:09.44243394 +0000 UTC m=+407.798547629 I0408 01:24:09.482218 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:09.482200651 +0000 UTC m=+407.838314320 I0408 01:24:09.502736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k86r9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:09.503154 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:09.503099665 +0000 UTC m=+407.859213354 I0408 01:24:09.521230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k86r9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:09.521631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k86r9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:09.521964 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-k86r9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:09.52195186 +0000 UTC m=+407.878065549 I0408 01:24:20.582355 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 01:24:20.582321544 +0000 UTC m=+418.938435213 I0408 01:24:20.582732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:24:20.582858 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 01:24:20.582793915 +0000 UTC m=+418.938907634 I0408 01:24:20.602477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:20.602539 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 01:24:20.602530666 +0000 UTC m=+418.958644355 I0408 01:24:20.686207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:20.752601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zstn4" condition "Approved" to 2026-04-08 01:24:20.752585181 +0000 UTC m=+419.108698860 I0408 01:24:20.770683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zstn4" condition "Ready" to 2026-04-08 01:24:20.770672872 +0000 UTC m=+419.126786551 I0408 01:24:20.797682 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:20.797402761 +0000 UTC m=+419.153516460 I0408 01:24:20.818594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:27:38.352359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:27:38.352423 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 01:27:38.35240962 +0000 UTC m=+616.708523329 I0408 01:27:38.352350 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 01:27:38.352326479 +0000 UTC m=+616.708440168 I0408 01:27:38.369791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:27:38.369926 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 01:27:38.369915051 +0000 UTC m=+616.726028740 I0408 01:27:38.709987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:27:38.744992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b6bbv" condition "Approved" to 2026-04-08 01:27:38.744973904 +0000 UTC m=+617.101087593 I0408 01:27:38.765201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b6bbv" condition "Ready" to 2026-04-08 01:27:38.765188091 +0000 UTC m=+617.121301770 I0408 01:27:38.796571 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:27:38.796555399 +0000 UTC m=+617.152669088 I0408 01:27:38.823132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:28:21.709279 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-08 01:28:21.709265981 +0000 UTC m=+660.065379660 I0408 01:28:21.709630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:28:21.709669 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-08 01:28:21.709666388 +0000 UTC m=+660.065780067 I0408 01:28:21.725950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:28:21.726084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:28:21.726098 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-08 01:28:21.726092491 +0000 UTC m=+660.082206170 I0408 01:28:21.842640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kfd2m" condition "Approved" to 2026-04-08 01:28:21.84262661 +0000 UTC m=+660.198740299 I0408 01:28:21.863324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kfd2m" condition "Ready" to 2026-04-08 01:28:21.863312424 +0000 UTC m=+660.219426103 I0408 01:28:21.901297 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:28:21.901285206 +0000 UTC m=+660.257398895 I0408 01:28:21.930133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:28:21.930374 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:28:21.93036795 +0000 UTC m=+660.286481629 I0408 01:28:21.952426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"