I0402 03:30:51.393349 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 03:30:51.393430 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 03:30:51.393514 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 03:30:51.396151 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 03:30:51.396726 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 03:30:51.396827 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 03:30:51.396846 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 03:30:51.398686 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 03:30:51.412505 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 03:30:51.418885 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 03:30:51.421156 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 03:30:51.421217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 03:30:51.423632 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 03:30:51.426091 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 03:30:51.428388 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 03:30:51.428542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 03:30:51.430247 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 03:30:51.431926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 03:30:51.437430 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 03:30:51.440543 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 03:30:51.440625 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 03:30:51.443001 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 03:30:51.445452 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 03:30:51.448026 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 03:30:51.450514 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 03:30:51.452785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 03:30:51.454544 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 03:30:51.458251 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 03:30:51.458285 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 03:30:51.458490 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 03:30:51.461987 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 03:30:51.464370 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 03:30:51.464414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 03:30:51.468902 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 03:30:51.469119 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 03:30:51.469970 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 03:30:51.469987 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 03:30:51.470140 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 03:30:51.470171 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 03:30:51.470198 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 03:30:51.470294 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 03:30:51.470860 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 03:30:51.545198 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 03:31:01.613471 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 03:31:01.613413536 +0000 UTC m=+10.253704535 I0402 03:31:02.348354 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 03:31:02.348336199 +0000 UTC m=+10.988627198 I0402 03:31:02.348574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:31:02.348639 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 03:31:02.348628704 +0000 UTC m=+10.988919733 E0402 03:31:02.365320 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 03:31:02.365405 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 03:31:02.365397723 +0000 UTC m=+11.005688692 E0402 03:31:02.365426 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 03:31:02.371633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:31:02.371699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:31:02.371723 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 03:31:02.371717903 +0000 UTC m=+11.012008872 E0402 03:31:02.377531 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0402 03:31:02.378658 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 03:31:02.378702 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 03:31:02.378753 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0402 03:31:02.408149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:31:02.413954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-44sc9" condition "Approved" to 2026-04-02 03:31:02.413938607 +0000 UTC m=+11.054229606 I0402 03:31:02.425444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-44sc9" condition "Ready" to 2026-04-02 03:31:02.42543219 +0000 UTC m=+11.065723169 I0402 03:31:02.449588 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:31:02.449575636 +0000 UTC m=+11.089866615 I0402 03:31:02.470127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:31:02.534895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:31:07.378539 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:31:07.378525468 +0000 UTC m=+16.018816477 I0402 03:31:30.781099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:31:30.781130 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 03:31:30.781123104 +0000 UTC m=+39.421414083 I0402 03:31:30.781775 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 03:31:30.781768722 +0000 UTC m=+39.422059701 I0402 03:31:30.801715 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 03:31:30.801704179 +0000 UTC m=+39.441995158 I0402 03:31:30.803985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:31:30.804062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:31:30.804130 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 03:31:30.804121979 +0000 UTC m=+39.444412958 I0402 03:31:31.142725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-56gmf" condition "Approved" to 2026-04-02 03:31:31.142713816 +0000 UTC m=+39.783004795 I0402 03:31:31.169452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-56gmf" condition "Ready" to 2026-04-02 03:31:31.169442136 +0000 UTC m=+39.809733115 I0402 03:31:31.207124 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:31:31.207114692 +0000 UTC m=+39.847405671 I0402 03:31:31.240951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:31:31.241258 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:31:31.241251904 +0000 UTC m=+39.881542883 I0402 03:31:31.258557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:31:31.258893 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:31:31.258885422 +0000 UTC m=+39.899176401 I0402 03:35:48.301157 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-04-02 03:35:48.301136595 +0000 UTC m=+296.941427604 I0402 03:35:48.301683 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:35:48.301727 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Issuing" to 2026-04-02 03:35:48.301722685 +0000 UTC m=+296.942013664 I0402 03:35:48.318478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:35:48.318563 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-04-02 03:35:48.318556049 +0000 UTC m=+296.958847028 I0402 03:35:48.393974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:35:48.421883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-zq744" condition "Approved" to 2026-04-02 03:35:48.421869125 +0000 UTC m=+297.062160124 I0402 03:35:48.454182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-zq744" condition "Ready" to 2026-04-02 03:35:48.45416689 +0000 UTC m=+297.094457899 I0402 03:35:48.511867 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:35:48.511852135 +0000 UTC m=+297.152143134 I0402 03:35:48.541478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:35:48.542027 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:35:48.542017065 +0000 UTC m=+297.182308074 I0402 03:35:48.573899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:36:55.940443 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 03:36:55.940400801 +0000 UTC m=+364.580691800 I0402 03:36:55.940881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:36:55.940997 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 03:36:55.94098091 +0000 UTC m=+364.581271909 E0402 03:36:55.953616 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 03:36:55.953674 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 03:36:55.953662123 +0000 UTC m=+364.593953132 E0402 03:36:55.953753 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 03:36:55.958239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:36:55.958333 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 03:36:55.95832653 +0000 UTC m=+364.598617509 E0402 03:36:55.969011 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0402 03:36:55.970547 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 03:36:55.970651 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 03:36:55.970791 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0402 03:36:55.981937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:36:56.006002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bkgz6" condition "Approved" to 2026-04-02 03:36:56.005985529 +0000 UTC m=+364.646276508 I0402 03:36:56.019627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bkgz6" condition "Ready" to 2026-04-02 03:36:56.019618717 +0000 UTC m=+364.659909696 I0402 03:36:56.043556 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:36:56.043530882 +0000 UTC m=+364.683821851 I0402 03:36:56.061457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:36:56.061704 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:36:56.061690454 +0000 UTC m=+364.701981433 I0402 03:36:56.084731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:36:56.084941 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:36:56.084933179 +0000 UTC m=+364.725224138 I0402 03:37:00.970066 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:37:00.970053876 +0000 UTC m=+369.610344835 I0402 03:37:43.430372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:37:43.430451 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 03:37:43.43044578 +0000 UTC m=+412.070736759 I0402 03:37:43.430451 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 03:37:43.430438909 +0000 UTC m=+412.070729908 I0402 03:37:43.479507 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 03:37:43.479495435 +0000 UTC m=+412.119786404 I0402 03:37:43.480091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:37:43.480113 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 03:37:43.480109933 +0000 UTC m=+412.120400902 I0402 03:37:43.480314 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 03:37:43.480311355 +0000 UTC m=+412.120602324 I0402 03:37:43.480509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:37:43.480526 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 03:37:43.480523438 +0000 UTC m=+412.120814407 I0402 03:37:43.496112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:43.496255 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 03:37:43.496247988 +0000 UTC m=+412.136538957 I0402 03:37:43.565325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:43.565404 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 03:37:43.565393972 +0000 UTC m=+412.205684971 I0402 03:37:43.601089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:43.601155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:37:43.601177 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 03:37:43.601169089 +0000 UTC m=+412.241460058 I0402 03:37:43.828907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bx2bq" condition "Approved" to 2026-04-02 03:37:43.828890791 +0000 UTC m=+412.469181760 I0402 03:37:43.853637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bx2bq" condition "Ready" to 2026-04-02 03:37:43.853627332 +0000 UTC m=+412.493918301 I0402 03:37:43.894560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:43.896440 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:37:43.896429203 +0000 UTC m=+412.536720182 I0402 03:37:43.928106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:43.928394 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:37:43.92838605 +0000 UTC m=+412.568677019 I0402 03:37:43.947619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2br65" condition "Approved" to 2026-04-02 03:37:43.947607137 +0000 UTC m=+412.587898096 I0402 03:37:43.962419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:43.974714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2br65" condition "Ready" to 2026-04-02 03:37:43.974557487 +0000 UTC m=+412.614848456 I0402 03:37:44.020791 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:37:44.020778554 +0000 UTC m=+412.661069523 I0402 03:37:44.057120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:44.057351 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:37:44.057344451 +0000 UTC m=+412.697635420 I0402 03:37:44.094693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:44.106884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:44.252607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:44.410395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-97r9w" condition "Approved" to 2026-04-02 03:37:44.41037602 +0000 UTC m=+413.050667029 I0402 03:37:44.514666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-97r9w" condition "Ready" to 2026-04-02 03:37:44.514652882 +0000 UTC m=+413.154943861 I0402 03:37:44.957665 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:37:44.95765227 +0000 UTC m=+413.597943239 I0402 03:37:45.052446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:45.052932 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:37:45.05292032 +0000 UTC m=+413.693211289 I0402 03:37:45.303402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:45.351238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:56.668998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:37:56.669031 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" condition "Ready" to 2026-04-02 03:37:56.669009609 +0000 UTC m=+425.309300608 I0402 03:37:56.669055 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" condition "Issuing" to 2026-04-02 03:37:56.66904344 +0000 UTC m=+425.309334439 I0402 03:37:56.811390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:56.811506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:37:56.811689 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" condition "Issuing" to 2026-04-02 03:37:56.81153435 +0000 UTC m=+425.451825349 I0402 03:37:57.976989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:57.978738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x8vvc-4srgv" condition "Approved" to 2026-04-02 03:37:57.97872067 +0000 UTC m=+426.619011669 I0402 03:37:58.151897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x8vvc-4srgv" condition "Ready" to 2026-04-02 03:37:58.151880797 +0000 UTC m=+426.792171806 I0402 03:37:58.364565 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:37:58.364549481 +0000 UTC m=+427.004840480 I0402 03:37:58.577794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:37:58.578550 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:37:58.578535212 +0000 UTC m=+427.218826211 I0402 03:37:59.095837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x8vvc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:38:17.317140 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 03:38:17.317127512 +0000 UTC m=+445.957418481 I0402 03:38:17.317501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:38:17.317517 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 03:38:17.317514807 +0000 UTC m=+445.957805776 I0402 03:38:17.338916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:38:17.338987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:38:17.339011 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 03:38:17.339003462 +0000 UTC m=+445.979294461 I0402 03:38:17.812443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dd79r" condition "Approved" to 2026-04-02 03:38:17.81178779 +0000 UTC m=+446.452078769 I0402 03:38:17.845163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dd79r" condition "Ready" to 2026-04-02 03:38:17.845154717 +0000 UTC m=+446.485445686 I0402 03:38:17.877609 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:38:17.877597481 +0000 UTC m=+446.517888450 I0402 03:38:17.907158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:38:18.033754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:41:37.519572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:41:37.519667 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 03:41:37.519656208 +0000 UTC m=+646.159947187 I0402 03:41:37.519978 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 03:41:37.519958742 +0000 UTC m=+646.160249751 I0402 03:41:37.539192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:41:37.539394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:41:37.539453 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 03:41:37.539443222 +0000 UTC m=+646.179734201 I0402 03:41:37.697385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:41:37.703279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-d6z4t" condition "Approved" to 2026-04-02 03:41:37.703263908 +0000 UTC m=+646.343554877 I0402 03:41:37.725456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-d6z4t" condition "Ready" to 2026-04-02 03:41:37.725443409 +0000 UTC m=+646.365734378 I0402 03:41:37.754055 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:41:37.754041674 +0000 UTC m=+646.394332653 I0402 03:41:37.780678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:41:37.781225 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:41:37.781218901 +0000 UTC m=+646.421509870 I0402 03:41:37.795185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:41:37.795554 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:41:37.795541183 +0000 UTC m=+646.435832162 I0402 03:42:23.822157 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-02 03:42:23.822136717 +0000 UTC m=+692.462427696 I0402 03:42:23.822488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 03:42:23.822535 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-02 03:42:23.822531398 +0000 UTC m=+692.462822377 I0402 03:42:23.839314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:42:23.839390 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-02 03:42:23.839382243 +0000 UTC m=+692.479673222 I0402 03:42:23.989773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 03:42:24.032257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2q7qm" condition "Approved" to 2026-04-02 03:42:24.032240088 +0000 UTC m=+692.672531087 I0402 03:42:24.052185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2q7qm" condition "Ready" to 2026-04-02 03:42:24.052173496 +0000 UTC m=+692.692464475 I0402 03:42:24.084976 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 03:42:24.08496416 +0000 UTC m=+692.725255139 I0402 03:42:24.110015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"