I0424 11:20:08.807032 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0424 11:20:08.807502 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0424 11:20:08.807705 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0424 11:20:08.816356 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0424 11:20:08.816938 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0424 11:20:08.817066 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0424 11:20:08.817060 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0424 11:20:08.819366 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0424 11:20:08.834658 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0424 11:20:08.835264 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0424 11:20:08.840861 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0424 11:20:08.844039 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0424 11:20:08.846209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0424 11:20:08.851489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0424 11:20:08.854437 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0424 11:20:08.857294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0424 11:20:08.859585 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0424 11:20:08.859657 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0424 11:20:08.864630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0424 11:20:08.868887 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0424 11:20:08.868931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0424 11:20:08.876064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0424 11:20:08.879749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0424 11:20:08.882100 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0424 11:20:08.884724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0424 11:20:08.887045 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0424 11:20:08.891643 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0424 11:20:08.891670 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0424 11:20:08.891762 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0424 11:20:08.893639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0424 11:20:08.895307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0424 11:20:08.897738 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0424 11:20:08.898769 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0424 11:20:08.908724 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 11:20:08.909132 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 11:20:08.909255 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 11:20:08.910429 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 11:20:08.951549 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 11:20:08.965676 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 11:20:08.985820 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 11:20:08.997152 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 11:20:08.997487 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 11:20:09.018273 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 11:20:19.338143 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-24 11:20:19.33811822 +0000 UTC m=+10.566605213 I0424 11:20:20.062665 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-24 11:20:20.06264706 +0000 UTC m=+11.291134053 I0424 11:20:20.063572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:20:20.063772 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-24 11:20:20.063652267 +0000 UTC m=+11.292139270 E0424 11:20:20.078519 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0424 11:20:20.078621 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-24 11:20:20.078607579 +0000 UTC m=+11.307094582 E0424 11:20:20.078661 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0424 11:20:20.079707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:20:20.079779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:20:20.079805 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-24 11:20:20.079797809 +0000 UTC m=+11.308284802 E0424 11:20:20.095025 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0424 11:20:20.095295 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0424 11:20:20.095335 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0424 11:20:20.095821 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0424 11:20:20.118342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lqx9h" condition "Approved" to 2026-04-24 11:20:20.118327533 +0000 UTC m=+11.346814506 I0424 11:20:20.132631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lqx9h" condition "Ready" to 2026-04-24 11:20:20.132615254 +0000 UTC m=+11.361102227 I0424 11:20:20.155106 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:20:20.154860065 +0000 UTC m=+11.383347048 I0424 11:20:20.170748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:20:20.171143 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:20:20.171133139 +0000 UTC m=+11.399620112 I0424 11:20:20.184806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:20:20.185162 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:20:20.185152456 +0000 UTC m=+11.413639419 I0424 11:20:20.189160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:20:25.096336 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:20:25.096321415 +0000 UTC m=+16.324808388 I0424 11:20:47.959820 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-24 11:20:47.959794331 +0000 UTC m=+39.188281294 I0424 11:20:47.960075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:20:47.960146 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-24 11:20:47.960141416 +0000 UTC m=+39.188628379 I0424 11:20:47.975193 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-24 11:20:47.975180909 +0000 UTC m=+39.203667872 I0424 11:20:47.978010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:20:47.978221 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-24 11:20:47.97820783 +0000 UTC m=+39.206694823 I0424 11:20:48.174805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:20:48.211613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rmm4m" condition "Approved" to 2026-04-24 11:20:48.211595563 +0000 UTC m=+39.440082566 I0424 11:20:48.257818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rmm4m" condition "Ready" to 2026-04-24 11:20:48.257804884 +0000 UTC m=+39.486291857 I0424 11:20:48.294769 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:20:48.29474576 +0000 UTC m=+39.523232753 I0424 11:20:48.333553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:20:48.333845 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:20:48.333838957 +0000 UTC m=+39.562325910 I0424 11:20:48.354822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:25:38.809517 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Ready" to 2026-04-24 11:25:38.809456543 +0000 UTC m=+330.037943506 I0424 11:25:38.810125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-179.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:25:38.810221 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Issuing" to 2026-04-24 11:25:38.810211634 +0000 UTC m=+330.038698627 I0424 11:25:38.825232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-179.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-179.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:25:38.825309 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-179.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:25:38.825325 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Issuing" to 2026-04-24 11:25:38.825316809 +0000 UTC m=+330.053803782 I0424 11:25:39.092806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-179.nip.io-tls-mmlhw" condition "Approved" to 2026-04-24 11:25:39.092745469 +0000 UTC m=+330.321232442 I0424 11:25:39.123810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-179.nip.io-tls-mmlhw" condition "Ready" to 2026-04-24 11:25:39.123791542 +0000 UTC m=+330.352278525 I0424 11:25:39.150242 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:25:39.150227665 +0000 UTC m=+330.378714628 I0424 11:25:39.174167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-179.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-179.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:25:39.174639 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:25:39.174632089 +0000 UTC m=+330.403119052 I0424 11:25:39.185248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-179.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-179.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:25:39.195261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-179.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-179.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:26:47.162753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:26:47.162830 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-24 11:26:47.162791776 +0000 UTC m=+398.391278779 I0424 11:26:47.162863 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-24 11:26:47.162838317 +0000 UTC m=+398.391325290 E0424 11:26:47.176351 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0424 11:26:47.176393 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-24 11:26:47.176386424 +0000 UTC m=+398.404873397 E0424 11:26:47.176480 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0424 11:26:47.183299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:26:47.183455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:26:47.183495 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-24 11:26:47.183484585 +0000 UTC m=+398.411971568 E0424 11:26:47.187163 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0424 11:26:47.187578 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0424 11:26:47.187666 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0424 11:26:47.187718 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0424 11:26:47.225815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-h5dfn" condition "Approved" to 2026-04-24 11:26:47.225800145 +0000 UTC m=+398.454287128 I0424 11:26:47.238100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-h5dfn" condition "Ready" to 2026-04-24 11:26:47.238084975 +0000 UTC m=+398.466571958 I0424 11:26:47.262084 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:26:47.262066566 +0000 UTC m=+398.490553539 I0424 11:26:47.278668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:26:52.187970 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:26:52.187953204 +0000 UTC m=+403.416440177 I0424 11:27:36.980780 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-24 11:27:36.980751318 +0000 UTC m=+448.209238281 I0424 11:27:36.980791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:27:36.980941 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-24 11:27:36.98092839 +0000 UTC m=+448.209415363 I0424 11:27:36.994039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:27:36.994085 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-24 11:27:36.99407606 +0000 UTC m=+448.222563023 I0424 11:27:36.995188 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-24 11:27:36.995175324 +0000 UTC m=+448.223662287 I0424 11:27:37.002511 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-24 11:27:37.002488072 +0000 UTC m=+448.230975065 I0424 11:27:37.003395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:27:37.003421 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-24 11:27:37.003416313 +0000 UTC m=+448.231903286 I0424 11:27:37.064093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:37.064165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:27:37.064189 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-24 11:27:37.06418322 +0000 UTC m=+448.292670183 I0424 11:27:37.067491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:37.067564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:27:37.067594 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-24 11:27:37.067588011 +0000 UTC m=+448.296074974 I0424 11:27:37.075462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:37.075567 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-24 11:27:37.075558568 +0000 UTC m=+448.304045531 I0424 11:27:37.347535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:37.348201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sf7t5" condition "Approved" to 2026-04-24 11:27:37.348186404 +0000 UTC m=+448.576673367 I0424 11:27:37.386864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sf7t5" condition "Ready" to 2026-04-24 11:27:37.386853742 +0000 UTC m=+448.615340715 I0424 11:27:37.409375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:37.440210 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:27:37.440197609 +0000 UTC m=+448.668684572 I0424 11:27:37.469812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:37.503421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:37.503770 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:27:37.50376211 +0000 UTC m=+448.732249073 I0424 11:27:37.551208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9c2px" condition "Approved" to 2026-04-24 11:27:37.551194784 +0000 UTC m=+448.779681767 I0424 11:27:37.552790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-td9zm" condition "Approved" to 2026-04-24 11:27:37.552785304 +0000 UTC m=+448.781272267 I0424 11:27:37.564832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:37.580903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9c2px" condition "Ready" to 2026-04-24 11:27:37.580886435 +0000 UTC m=+448.809373398 I0424 11:27:37.593470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:37.595191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-td9zm" condition "Ready" to 2026-04-24 11:27:37.595181638 +0000 UTC m=+448.823668601 I0424 11:27:38.137200 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:27:38.137169377 +0000 UTC m=+449.365656350 I0424 11:27:38.223686 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:27:38.223665574 +0000 UTC m=+449.452152577 I0424 11:27:38.321388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:38.321869 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:27:38.321860464 +0000 UTC m=+449.550347437 I0424 11:27:38.425164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:38.675020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:38.971360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:45.599485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k874x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:27:45.599531 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-k874x-tls" condition "Issuing" to 2026-04-24 11:27:45.599513532 +0000 UTC m=+456.828000515 I0424 11:27:45.600054 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-k874x-tls" condition "Ready" to 2026-04-24 11:27:45.600045578 +0000 UTC m=+456.828532561 I0424 11:27:45.627838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k874x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k874x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:45.627952 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-k874x-tls" condition "Ready" to 2026-04-24 11:27:45.627942373 +0000 UTC m=+456.856429346 I0424 11:27:45.832160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k874x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k874x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:45.866777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-k874x-m7td9" condition "Approved" to 2026-04-24 11:27:45.866760172 +0000 UTC m=+457.095247145 I0424 11:27:45.884546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-k874x-m7td9" condition "Ready" to 2026-04-24 11:27:45.884534006 +0000 UTC m=+457.113020969 I0424 11:27:45.924104 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-k874x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:27:45.924087431 +0000 UTC m=+457.152574384 I0424 11:27:45.943494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k874x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k874x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:45.944270 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-k874x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:27:45.944261813 +0000 UTC m=+457.172748786 I0424 11:27:45.969712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k874x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k874x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:45.970048 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-k874x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:27:45.970039633 +0000 UTC m=+457.198526596 I0424 11:27:45.970422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k874x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k874x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:59.665612 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-24 11:27:59.665597122 +0000 UTC m=+470.894084085 I0424 11:27:59.666775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:27:59.666793 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-24 11:27:59.666788796 +0000 UTC m=+470.895275759 I0424 11:27:59.701318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:27:59.701379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:27:59.701398 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-24 11:27:59.701390595 +0000 UTC m=+470.929877568 I0424 11:27:59.980382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rzhdd" condition "Approved" to 2026-04-24 11:27:59.980270176 +0000 UTC m=+471.208757179 I0424 11:28:00.008354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rzhdd" condition "Ready" to 2026-04-24 11:28:00.008338269 +0000 UTC m=+471.236825232 I0424 11:28:00.048244 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:28:00.0481908 +0000 UTC m=+471.276677773 I0424 11:28:00.076379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:28:00.076669 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:28:00.076661686 +0000 UTC m=+471.305148649 I0424 11:28:00.103947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:31:41.505502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:31:41.505582 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-24 11:31:41.505573314 +0000 UTC m=+692.734060297 I0424 11:31:41.505877 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-24 11:31:41.505488783 +0000 UTC m=+692.733975796 I0424 11:31:41.526647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:31:41.526828 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-24 11:31:41.526821328 +0000 UTC m=+692.755308301 I0424 11:31:41.801209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:31:41.832310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j4nxk" condition "Approved" to 2026-04-24 11:31:41.832300918 +0000 UTC m=+693.060787881 I0424 11:31:41.856086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j4nxk" condition "Ready" to 2026-04-24 11:31:41.856069099 +0000 UTC m=+693.084556062 I0424 11:31:41.900989 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:31:41.900971774 +0000 UTC m=+693.129458747 I0424 11:31:41.928211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:32:27.860774 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-24 11:32:27.860747533 +0000 UTC m=+739.089234496 I0424 11:32:27.861125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 11:32:27.861144 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-24 11:32:27.861141463 +0000 UTC m=+739.089628426 I0424 11:32:27.886000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:32:27.886280 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-24 11:32:27.886268378 +0000 UTC m=+739.114755371 I0424 11:32:28.249113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:32:28.290804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jvbz7" condition "Approved" to 2026-04-24 11:32:28.290792764 +0000 UTC m=+739.519279727 I0424 11:32:28.317424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jvbz7" condition "Ready" to 2026-04-24 11:32:28.317408698 +0000 UTC m=+739.545895661 I0424 11:32:28.373736 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:32:28.373712308 +0000 UTC m=+739.602199281 I0424 11:32:28.395608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0424 11:32:28.395838 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 11:32:28.395831421 +0000 UTC m=+739.624318384 I0424 11:32:28.416982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"