I0417 21:08:14.869449 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 21:08:14.869600 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 21:08:14.869669 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 21:08:14.874021 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 21:08:14.874366 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 21:08:14.874475 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 21:08:14.874499 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 21:08:14.876985 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 21:08:15.082031 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 21:08:15.087104 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 21:08:15.091168 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 21:08:15.091227 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 21:08:15.094966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 21:08:15.096703 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 21:08:15.098603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 21:08:15.104583 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 21:08:15.107205 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 21:08:15.107232 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 21:08:15.107279 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 21:08:15.109962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 21:08:15.112314 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 21:08:15.112388 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 21:08:15.114985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 21:08:15.117581 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 21:08:15.119568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 21:08:15.121231 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 21:08:15.126572 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 21:08:15.129077 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 21:08:15.129109 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 21:08:15.129133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 21:08:15.131728 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 21:08:15.134338 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 21:08:15.137835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 21:08:15.140194 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:08:15.140197 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:08:15.141095 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:08:15.223226 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:08:15.240818 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:08:15.242131 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:08:15.242452 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:08:15.242946 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:08:15.244315 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:08:15.269236 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:08:32.292602 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 21:08:32.292576347 +0000 UTC m=+17.453876060 I0417 21:08:33.046506 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 21:08:33.046491047 +0000 UTC m=+18.207790780 I0417 21:08:33.046971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:08:33.047404 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 21:08:33.047043532 +0000 UTC m=+18.208343275 E0417 21:08:33.059525 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 21:08:33.059592 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 21:08:33.05958487 +0000 UTC m=+18.220884603 E0417 21:08:33.059660 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 21:08:33.062838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:08:33.062893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:08:33.063039 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 21:08:33.063030485 +0000 UTC m=+18.224330228 E0417 21:08:33.069510 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 21:08:33.069706 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 21:08:33.069758 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 21:08:33.069788 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 21:08:33.100449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4kdhc" condition "Approved" to 2026-04-17 21:08:33.100436987 +0000 UTC m=+18.261736700 I0417 21:08:33.101480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:08:33.114433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4kdhc" condition "Ready" to 2026-04-17 21:08:33.11442156 +0000 UTC m=+18.275721273 I0417 21:08:33.140417 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:08:33.140401515 +0000 UTC m=+18.301701218 I0417 21:08:33.162313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:08:33.162633 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:08:33.162599379 +0000 UTC m=+18.323899092 I0417 21:08:33.176850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:08:33.177125 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:08:33.177116676 +0000 UTC m=+18.338416389 I0417 21:08:38.069861 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:08:38.069850412 +0000 UTC m=+23.231150125 I0417 21:09:02.321031 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 21:09:02.320990096 +0000 UTC m=+47.482289799 I0417 21:09:02.321034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:09:02.321387 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 21:09:02.321123484 +0000 UTC m=+47.482423197 I0417 21:09:02.339374 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 21:09:02.339365128 +0000 UTC m=+47.500664831 I0417 21:09:02.355775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:09:02.355835 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:09:02.355853 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 21:09:02.355848104 +0000 UTC m=+47.517147797 I0417 21:09:02.513686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:09:02.517286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-p4nsv" condition "Approved" to 2026-04-17 21:09:02.517270492 +0000 UTC m=+47.678570235 I0417 21:09:02.547842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-p4nsv" condition "Ready" to 2026-04-17 21:09:02.547831291 +0000 UTC m=+47.709131004 I0417 21:09:02.583515 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:09:02.583498835 +0000 UTC m=+47.744798568 I0417 21:09:02.606925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:09:02.659679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:13:58.526089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:13:58.526135 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-04-17 21:13:58.526125881 +0000 UTC m=+343.687425614 I0417 21:13:58.526067 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready" to 2026-04-17 21:13:58.52604215 +0000 UTC m=+343.687341863 I0417 21:13:58.542589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:13:58.542634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:13:58.542648 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-04-17 21:13:58.542643478 +0000 UTC m=+343.703943191 I0417 21:13:58.862499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-plggk" condition "Approved" to 2026-04-17 21:13:58.862488343 +0000 UTC m=+344.023788056 I0417 21:13:58.887921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-plggk" condition "Ready" to 2026-04-17 21:13:58.887901702 +0000 UTC m=+344.049201415 I0417 21:13:58.909924 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:13:58.909911596 +0000 UTC m=+344.071211299 I0417 21:13:58.926627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:13:58.972096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:03.362435 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:15:03.362495 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 21:15:03.362472368 +0000 UTC m=+408.523772101 I0417 21:15:03.362815 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 21:15:03.362786507 +0000 UTC m=+408.524086240 E0417 21:15:03.377795 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 21:15:03.377847 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 21:15:03.377836211 +0000 UTC m=+408.539135914 E0417 21:15:03.378219 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 21:15:03.379920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:03.380186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:15:03.380242 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 21:15:03.38021053 +0000 UTC m=+408.541510243 E0417 21:15:03.388392 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 21:15:03.390176 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 21:15:03.390249 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 21:15:03.390287 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 21:15:03.414699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:03.420131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mstmg" condition "Approved" to 2026-04-17 21:15:03.420115976 +0000 UTC m=+408.581415689 I0417 21:15:03.435733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mstmg" condition "Ready" to 2026-04-17 21:15:03.435716785 +0000 UTC m=+408.597016498 I0417 21:15:03.457188 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:15:03.457172947 +0000 UTC m=+408.618472660 I0417 21:15:03.473179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:03.519647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:08.389244 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:15:08.389227451 +0000 UTC m=+413.550527184 I0417 21:15:49.530740 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 21:15:49.530705859 +0000 UTC m=+454.692005562 I0417 21:15:49.531040 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:15:49.531060 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 21:15:49.531057283 +0000 UTC m=+454.692356986 I0417 21:15:49.561772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:15:49.561815 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 21:15:49.561806469 +0000 UTC m=+454.723106172 I0417 21:15:49.562132 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 21:15:49.562125871 +0000 UTC m=+454.723425584 I0417 21:15:49.562322 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 21:15:49.562303107 +0000 UTC m=+454.723602810 I0417 21:15:49.562878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:15:49.562992 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 21:15:49.562982093 +0000 UTC m=+454.724281786 I0417 21:15:49.672062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:49.672179 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 21:15:49.672171447 +0000 UTC m=+454.833471150 I0417 21:15:49.686569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:49.686727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:15:49.686762 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 21:15:49.686752395 +0000 UTC m=+454.848052138 I0417 21:15:49.705101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:49.705289 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 21:15:49.705276943 +0000 UTC m=+454.866576636 I0417 21:15:49.843155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:49.880950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fzmx9" condition "Approved" to 2026-04-17 21:15:49.880938459 +0000 UTC m=+455.042238162 I0417 21:15:49.925442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fzmx9" condition "Ready" to 2026-04-17 21:15:49.925430229 +0000 UTC m=+455.086729932 I0417 21:15:49.970796 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:15:49.970782953 +0000 UTC m=+455.132082656 I0417 21:15:49.980235 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-df2zw" condition "Approved" to 2026-04-17 21:15:49.980216484 +0000 UTC m=+455.141516197 I0417 21:15:49.996375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-df2zw" condition "Ready" to 2026-04-17 21:15:49.996360691 +0000 UTC m=+455.157660384 I0417 21:15:49.997166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:49.997480 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:15:49.997471303 +0000 UTC m=+455.158771006 I0417 21:15:50.023709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:50.024019 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:15:50.024011332 +0000 UTC m=+455.185311045 I0417 21:15:50.034173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:50.034218 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:15:50.034197783 +0000 UTC m=+455.195497496 I0417 21:15:50.100971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:50.102760 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:15:50.101289088 +0000 UTC m=+455.262588781 I0417 21:15:50.252659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-47b7v" condition "Approved" to 2026-04-17 21:15:50.252639498 +0000 UTC m=+455.413939211 E0417 21:15:50.355280 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-r4mmn\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0417 21:15:50.400462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:50.512262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-47b7v" condition "Ready" to 2026-04-17 21:15:50.512247964 +0000 UTC m=+455.673547677 I0417 21:15:51.052469 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:15:51.052446569 +0000 UTC m=+456.213746312 I0417 21:15:51.100133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:51.196667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:51.197185 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:15:51.197177497 +0000 UTC m=+456.358477200 I0417 21:15:51.450005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:51.499932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:58.272485 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls" condition "Ready" to 2026-04-17 21:15:58.272467925 +0000 UTC m=+463.433767628 I0417 21:15:58.272806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:15:58.272831 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls" condition "Issuing" to 2026-04-17 21:15:58.272826219 +0000 UTC m=+463.434125932 I0417 21:15:58.288553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:58.288656 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls" condition "Ready" to 2026-04-17 21:15:58.288646376 +0000 UTC m=+463.449946079 I0417 21:15:58.508502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:58.541303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zr8fg-65st4" condition "Approved" to 2026-04-17 21:15:58.541285692 +0000 UTC m=+463.702585405 I0417 21:15:58.559522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zr8fg-65st4" condition "Ready" to 2026-04-17 21:15:58.559504323 +0000 UTC m=+463.720804066 I0417 21:15:58.588382 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:15:58.588360556 +0000 UTC m=+463.749660249 I0417 21:15:58.615222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:15:58.675285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zr8fg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:13.683421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:16:13.683468 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 21:16:13.683457368 +0000 UTC m=+478.844757081 I0417 21:16:13.683986 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 21:16:13.683980319 +0000 UTC m=+478.845280032 I0417 21:16:13.711137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:13.711287 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 21:16:13.711279758 +0000 UTC m=+478.872579451 I0417 21:16:13.913232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:13.951753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2gn5r" condition "Approved" to 2026-04-17 21:16:13.951732024 +0000 UTC m=+479.113031757 I0417 21:16:13.974221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2gn5r" condition "Ready" to 2026-04-17 21:16:13.974203611 +0000 UTC m=+479.135503354 I0417 21:16:14.011421 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:16:14.011383432 +0000 UTC m=+479.172683145 I0417 21:16:14.042063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:19:38.639650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:19:38.639744 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 21:19:38.639731789 +0000 UTC m=+683.801031502 I0417 21:19:38.639917 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 21:19:38.639889228 +0000 UTC m=+683.801188971 I0417 21:19:38.658455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:19:38.658622 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 21:19:38.65861049 +0000 UTC m=+683.819910203 I0417 21:19:38.765821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:19:38.807652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2hcl5" condition "Approved" to 2026-04-17 21:19:38.807637759 +0000 UTC m=+683.968937462 I0417 21:19:38.832732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2hcl5" condition "Ready" to 2026-04-17 21:19:38.83271784 +0000 UTC m=+683.994017553 I0417 21:19:38.870548 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:19:38.870529582 +0000 UTC m=+684.031829285 I0417 21:19:38.896969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:19:38.897223 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:19:38.897214333 +0000 UTC m=+684.058514036 I0417 21:19:38.923800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:20:21.911107 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 21:20:21.911087857 +0000 UTC m=+727.072387590 I0417 21:20:21.911950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:20:21.911984 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 21:20:21.911976496 +0000 UTC m=+727.073276239 I0417 21:20:21.930954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:20:21.931071 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 21:20:21.931061946 +0000 UTC m=+727.092361649 I0417 21:20:22.060684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:20:22.094983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-g4l2h" condition "Approved" to 2026-04-17 21:20:22.094967604 +0000 UTC m=+727.256267327 I0417 21:20:22.118280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-g4l2h" condition "Ready" to 2026-04-17 21:20:22.11826873 +0000 UTC m=+727.279568433 I0417 21:20:22.155615 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:20:22.155600393 +0000 UTC m=+727.316900096 I0417 21:20:22.179458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"