I0417 18:40:17.884374 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 18:40:17.884621 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 18:40:17.884733 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 18:40:17.891600 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 18:40:17.892159 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 18:40:17.892267 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 18:40:17.892336 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 18:40:17.895217 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 18:40:17.912098 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 18:40:17.917391 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 18:40:17.919648 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 18:40:17.919680 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 18:40:17.919689 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 18:40:17.919799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 18:40:17.928438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 18:40:17.932418 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 18:40:17.935993 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 18:40:17.940669 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 18:40:17.943817 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 18:40:17.946424 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 18:40:17.946485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 18:40:17.952211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 18:40:17.955153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 18:40:17.957430 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 18:40:17.959574 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 18:40:17.961960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 18:40:17.963787 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 18:40:17.965450 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 18:40:17.965518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 18:40:17.967366 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 18:40:17.967561 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 18:40:17.969574 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 18:40:17.972762 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 18:40:17.978045 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:40:17.978855 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:40:17.979408 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:40:17.998036 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:40:18.013721 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:40:18.031320 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:40:18.047793 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:40:18.064925 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:40:18.076883 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:40:18.088376 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:40:32.967232 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 18:40:32.967212642 +0000 UTC m=+15.118030316 I0417 18:40:33.817245 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 18:40:33.817225785 +0000 UTC m=+15.968043469 I0417 18:40:33.818346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:40:33.818420 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 18:40:33.818411454 +0000 UTC m=+15.969229108 E0417 18:40:33.832906 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:40:33.832992 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 18:40:33.832984103 +0000 UTC m=+15.983801767 E0417 18:40:33.833165 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:40:33.840785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:40:33.841058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:40:33.841122 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 18:40:33.841109966 +0000 UTC m=+15.991927650 E0417 18:40:33.842313 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 18:40:33.842490 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:40:33.842530 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:40:33.842594 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 18:40:33.893162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:40:33.896435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jsxc4" condition "Approved" to 2026-04-17 18:40:33.896415213 +0000 UTC m=+16.047232907 I0417 18:40:33.914212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jsxc4" condition "Ready" to 2026-04-17 18:40:33.914200525 +0000 UTC m=+16.065018189 I0417 18:40:33.936627 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:33.936595612 +0000 UTC m=+16.087413286 I0417 18:40:33.957092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:40:33.995172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:40:38.843177 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:38.843161939 +0000 UTC m=+20.993979633 I0417 18:41:06.679042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:41:06.679120 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 18:41:06.679112058 +0000 UTC m=+48.829929722 I0417 18:41:06.679693 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 18:41:06.679687036 +0000 UTC m=+48.830504690 I0417 18:41:06.699609 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 18:41:06.699592513 +0000 UTC m=+48.850410177 I0417 18:41:06.718319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:41:06.718498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:41:06.718540 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 18:41:06.718531727 +0000 UTC m=+48.869349391 I0417 18:41:07.136961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k66pb" condition "Approved" to 2026-04-17 18:41:07.136947592 +0000 UTC m=+49.287765256 I0417 18:41:07.168536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k66pb" condition "Ready" to 2026-04-17 18:41:07.168525304 +0000 UTC m=+49.319342958 I0417 18:41:07.207118 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:41:07.207086268 +0000 UTC m=+49.357903962 I0417 18:41:07.242364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:41:07.242845 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:41:07.242835046 +0000 UTC m=+49.393652710 I0417 18:41:07.267103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:41:07.267430 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:41:07.267421854 +0000 UTC m=+49.418239498 I0417 18:46:33.926986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-20.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:46:33.927045 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-20.nip.io-tls" condition "Issuing" to 2026-04-17 18:46:33.9270383 +0000 UTC m=+376.077855964 I0417 18:46:33.927587 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-20.nip.io-tls" condition "Ready" to 2026-04-17 18:46:33.927564078 +0000 UTC m=+376.078381742 I0417 18:46:33.949067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-20.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-20.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:46:33.949153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-20.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:46:33.949171 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-20.nip.io-tls" condition "Issuing" to 2026-04-17 18:46:33.949163072 +0000 UTC m=+376.099980736 I0417 18:46:34.135819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-20.nip.io-tls-22ljx" condition "Approved" to 2026-04-17 18:46:34.135180349 +0000 UTC m=+376.285998023 I0417 18:46:34.182284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-20.nip.io-tls-22ljx" condition "Ready" to 2026-04-17 18:46:34.182222531 +0000 UTC m=+376.333040215 I0417 18:46:34.232666 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-20.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:34.232602571 +0000 UTC m=+376.383420245 I0417 18:46:34.269327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-20.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-20.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:46:34.269927 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-20.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:34.269915901 +0000 UTC m=+376.420733565 I0417 18:46:34.336559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-20.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-20.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:46:34.339974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-20.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-20.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:41.132283 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:47:41.132261987 +0000 UTC m=+443.283079671 I0417 18:47:41.132445 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:47:41.132522 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 18:47:41.13250102 +0000 UTC m=+443.283318684 E0417 18:47:41.143098 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:47:41.143155 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 18:47:41.14314228 +0000 UTC m=+443.293959974 E0417 18:47:41.143241 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:47:41.145921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:41.146004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:47:41.146029 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 18:47:41.146024987 +0000 UTC m=+443.296842651 E0417 18:47:41.153232 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 18:47:41.153343 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:47:41.153394 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:47:41.153432 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 18:47:41.185421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ht2br" condition "Approved" to 2026-04-17 18:47:41.185401352 +0000 UTC m=+443.336219016 I0417 18:47:41.199814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ht2br" condition "Ready" to 2026-04-17 18:47:41.19980312 +0000 UTC m=+443.350620784 I0417 18:47:41.222246 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:41.222234833 +0000 UTC m=+443.373052498 I0417 18:47:41.236959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:41.237282 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:41.23727044 +0000 UTC m=+443.388088134 I0417 18:47:41.251545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:47:41.251794 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:41.25178617 +0000 UTC m=+443.402603834 I0417 18:47:46.154109 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:46.154090849 +0000 UTC m=+448.304908543 I0417 18:48:27.273571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:48:27.273607 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 18:48:27.273601627 +0000 UTC m=+489.424419271 I0417 18:48:27.275424 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:48:27.27541513 +0000 UTC m=+489.426232774 I0417 18:48:27.275708 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 18:48:27.275704773 +0000 UTC m=+489.426522427 I0417 18:48:27.275866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:48:27.275881 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 18:48:27.275878686 +0000 UTC m=+489.426696340 I0417 18:48:27.276236 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:48:27.27623196 +0000 UTC m=+489.427049624 I0417 18:48:27.276389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:48:27.276404 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 18:48:27.276401512 +0000 UTC m=+489.427219166 I0417 18:48:27.378428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:27.378504 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:48:27.378498224 +0000 UTC m=+489.529315878 I0417 18:48:27.400905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:27.400990 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:48:27.400983254 +0000 UTC m=+489.551800908 I0417 18:48:27.404711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:27.404761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:48:27.404779 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 18:48:27.404774511 +0000 UTC m=+489.555592165 I0417 18:48:27.556134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:27.561752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:27.594569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sgkdc" condition "Approved" to 2026-04-17 18:48:27.594561085 +0000 UTC m=+489.745378739 I0417 18:48:27.596655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s7tpt" condition "Approved" to 2026-04-17 18:48:27.596641721 +0000 UTC m=+489.747459385 I0417 18:48:27.631518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s7tpt" condition "Ready" to 2026-04-17 18:48:27.631508716 +0000 UTC m=+489.782326370 I0417 18:48:27.632181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sgkdc" condition "Ready" to 2026-04-17 18:48:27.632165633 +0000 UTC m=+489.782983297 I0417 18:48:27.747087 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:27.747075275 +0000 UTC m=+489.897892929 I0417 18:48:27.749393 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:27.749381204 +0000 UTC m=+489.900198858 I0417 18:48:27.759942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:27.760487 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:27.760477262 +0000 UTC m=+489.911294916 I0417 18:48:27.769546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:27.770293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:27.770573 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:27.770566237 +0000 UTC m=+489.921383891 I0417 18:48:27.886535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:27.935752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:27.936404 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:27.936397102 +0000 UTC m=+490.087214766 I0417 18:48:28.241640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rdqn7" condition "Approved" to 2026-04-17 18:48:28.241619562 +0000 UTC m=+490.392437256 I0417 18:48:28.453339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rdqn7" condition "Ready" to 2026-04-17 18:48:28.453328746 +0000 UTC m=+490.604146400 I0417 18:48:28.808495 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:28.808473176 +0000 UTC m=+490.959290850 I0417 18:48:28.884285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:28.884588 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:28.884580934 +0000 UTC m=+491.035398588 I0417 18:48:29.083566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:36.971894 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls" condition "Ready" to 2026-04-17 18:48:36.971874707 +0000 UTC m=+499.122692391 I0417 18:48:36.972237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:48:36.972290 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls" condition "Issuing" to 2026-04-17 18:48:36.972278041 +0000 UTC m=+499.123095735 I0417 18:48:36.987782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:36.987895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:48:36.987928 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls" condition "Issuing" to 2026-04-17 18:48:36.987920695 +0000 UTC m=+499.138738359 I0417 18:48:37.139965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zjbbs-w5slm" condition "Approved" to 2026-04-17 18:48:37.139946823 +0000 UTC m=+499.290764517 I0417 18:48:37.169509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zjbbs-w5slm" condition "Ready" to 2026-04-17 18:48:37.169500857 +0000 UTC m=+499.320318511 I0417 18:48:37.205237 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:37.205225598 +0000 UTC m=+499.356043252 I0417 18:48:37.225326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:37.225593 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:37.2255863 +0000 UTC m=+499.376403954 I0417 18:48:37.725247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zjbbs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:55.016840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:48:55.016887 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 18:48:55.01687859 +0000 UTC m=+517.167696264 I0417 18:48:55.017343 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:48:55.017335825 +0000 UTC m=+517.168153489 I0417 18:48:55.040475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:55.040760 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:48:55.04074566 +0000 UTC m=+517.191563404 I0417 18:48:55.142385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:55.172541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7xbsx" condition "Approved" to 2026-04-17 18:48:55.172526764 +0000 UTC m=+517.323344428 I0417 18:48:55.193327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7xbsx" condition "Ready" to 2026-04-17 18:48:55.193317188 +0000 UTC m=+517.344134852 I0417 18:48:55.325120 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:55.325105772 +0000 UTC m=+517.475923446 I0417 18:48:55.349755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:15.410086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:52:15.410174 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 18:52:15.410162394 +0000 UTC m=+717.560980088 I0417 18:52:15.410559 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 18:52:15.410541935 +0000 UTC m=+717.561359629 I0417 18:52:15.425820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:15.426058 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 18:52:15.426048813 +0000 UTC m=+717.576866507 I0417 18:52:15.724843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:15.755842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gjkjk" condition "Approved" to 2026-04-17 18:52:15.755827178 +0000 UTC m=+717.906644872 I0417 18:52:15.771870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gjkjk" condition "Ready" to 2026-04-17 18:52:15.77186168 +0000 UTC m=+717.922679344 I0417 18:52:15.799838 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:15.79982576 +0000 UTC m=+717.950643424 I0417 18:52:15.824273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:15.826671 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:15.826663258 +0000 UTC m=+717.977480922 I0417 18:52:15.844770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:15.855616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:15.855939 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:15.855933065 +0000 UTC m=+718.006750719 I0417 18:52:58.659230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:52:58.659676 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 18:52:58.659664207 +0000 UTC m=+760.810481931 I0417 18:52:58.659962 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 18:52:58.659938314 +0000 UTC m=+760.810756038 I0417 18:52:58.676142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:58.677752 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 18:52:58.676191585 +0000 UTC m=+760.827009249 I0417 18:52:58.902356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:58.929336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gwk2c" condition "Approved" to 2026-04-17 18:52:58.929325001 +0000 UTC m=+761.080142655 I0417 18:52:58.951593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gwk2c" condition "Ready" to 2026-04-17 18:52:58.951583098 +0000 UTC m=+761.102400752 I0417 18:52:58.976875 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:58.976862953 +0000 UTC m=+761.127680607 I0417 18:52:58.988570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:58.988935 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:58.988929295 +0000 UTC m=+761.139746959 I0417 18:52:59.018303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"