I0421 01:23:58.466870 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0421 01:23:58.467119 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0421 01:23:58.467244 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0421 01:23:58.470804 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0421 01:23:58.471258 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0421 01:23:58.471360 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0421 01:23:58.471377 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0421 01:23:58.474059 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0421 01:23:58.491487 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0421 01:23:58.491809 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0421 01:23:58.495532 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0421 01:23:58.503058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0421 01:23:58.506092 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0421 01:23:58.508782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0421 01:23:58.510577 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0421 01:23:58.512596 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0421 01:23:58.514405 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0421 01:23:58.514425 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0421 01:23:58.514590 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0421 01:23:58.522129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0421 01:23:58.526092 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0421 01:23:58.530020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0421 01:23:58.532768 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0421 01:23:58.532950 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0421 01:23:58.534840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0421 01:23:58.537706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0421 01:23:58.541513 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0421 01:23:58.548841 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0421 01:23:58.552631 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0421 01:23:58.552784 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0421 01:23:58.555164 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0421 01:23:58.555203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0421 01:23:58.557703 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0421 01:23:58.560526 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 01:23:58.561488 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 01:23:58.561545 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 01:23:58.561694 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 01:23:58.561860 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 01:23:58.562056 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 01:23:58.562892 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 01:23:58.564184 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 01:23:58.564250 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 01:23:58.638892 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 01:24:14.990700 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 01:24:14.990675415 +0000 UTC m=+16.555518131 I0421 01:24:15.783683 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 01:24:15.783663802 +0000 UTC m=+17.348506558 I0421 01:24:15.785764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:24:15.785798 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 01:24:15.785790534 +0000 UTC m=+17.350633290 E0421 01:24:15.799726 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 01:24:15.799841 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 01:24:15.799830665 +0000 UTC m=+17.364673391 E0421 01:24:15.799889 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 01:24:15.802716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:24:15.802802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:24:15.802824 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 01:24:15.802815914 +0000 UTC m=+17.367658650 E0421 01:24:15.811484 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0421 01:24:15.811594 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 01:24:15.811638 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 01:24:15.811685 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0421 01:24:15.841843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:24:15.847410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bfjtj" condition "Approved" to 2026-04-21 01:24:15.847393765 +0000 UTC m=+17.412236511 I0421 01:24:15.860174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bfjtj" condition "Ready" to 2026-04-21 01:24:15.86015387 +0000 UTC m=+17.424996596 I0421 01:24:15.883587 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:24:15.883569007 +0000 UTC m=+17.448411733 I0421 01:24:15.898411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:24:15.898664 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:24:15.898656489 +0000 UTC m=+17.463499215 I0421 01:24:15.915623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:24:15.920942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:24:20.812496 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:24:20.812474118 +0000 UTC m=+22.377316874 I0421 01:24:43.541157 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 01:24:43.541129 +0000 UTC m=+45.105971726 I0421 01:24:43.541638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:24:43.541665 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 01:24:43.541660081 +0000 UTC m=+45.106502807 I0421 01:24:43.554310 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 01:24:43.554293226 +0000 UTC m=+45.119135932 I0421 01:24:43.579431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:24:43.579610 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 01:24:43.579505264 +0000 UTC m=+45.144347990 I0421 01:24:43.842835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:24:43.879343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-klbdg" condition "Approved" to 2026-04-21 01:24:43.879328758 +0000 UTC m=+45.444171484 I0421 01:24:43.908918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-klbdg" condition "Ready" to 2026-04-21 01:24:43.90890224 +0000 UTC m=+45.473744966 I0421 01:24:43.950969 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:24:43.950952014 +0000 UTC m=+45.515794740 I0421 01:24:43.980067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:24:43.980343 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:24:43.980332374 +0000 UTC m=+45.545175100 I0421 01:24:43.991140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:24:44.007951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:29:17.639149 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Ready" to 2026-04-21 01:29:17.639108277 +0000 UTC m=+319.203951023 I0421 01:29:17.639332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-163.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:29:17.639409 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Issuing" to 2026-04-21 01:29:17.639400532 +0000 UTC m=+319.204243258 I0421 01:29:17.655841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:29:17.656000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-163.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:29:17.656047 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Issuing" to 2026-04-21 01:29:17.656041752 +0000 UTC m=+319.220884478 I0421 01:29:17.886228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:29:17.898655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-163.nip.io-tls-7k998" condition "Approved" to 2026-04-21 01:29:17.898643637 +0000 UTC m=+319.463486363 I0421 01:29:17.923465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-163.nip.io-tls-7k998" condition "Ready" to 2026-04-21 01:29:17.923452958 +0000 UTC m=+319.488295674 I0421 01:29:17.946329 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:29:17.946319051 +0000 UTC m=+319.511161767 I0421 01:29:17.968770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:30:21.451447 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 01:30:21.451428457 +0000 UTC m=+383.016271203 I0421 01:30:21.451518 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:30:21.451664 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 01:30:21.451650541 +0000 UTC m=+383.016493287 E0421 01:30:21.463937 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 01:30:21.464035 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-21 01:30:21.464018269 +0000 UTC m=+383.028860995 E0421 01:30:21.464126 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 01:30:21.469445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:30:21.469506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:30:21.469525 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 01:30:21.469519515 +0000 UTC m=+383.034362241 E0421 01:30:21.475885 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0421 01:30:21.475945 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 01:30:21.475967 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 01:30:21.476046 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0421 01:30:21.505845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:30:21.511731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bg5gw" condition "Approved" to 2026-04-21 01:30:21.511718741 +0000 UTC m=+383.076561467 I0421 01:30:21.522622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bg5gw" condition "Ready" to 2026-04-21 01:30:21.522612072 +0000 UTC m=+383.087454798 I0421 01:30:21.544884 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:30:21.544863032 +0000 UTC m=+383.109705788 I0421 01:30:21.559752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:30:21.560002 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:30:21.559993914 +0000 UTC m=+383.124836640 I0421 01:30:21.573631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:30:26.477352 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:30:26.47733675 +0000 UTC m=+388.042179496 I0421 01:31:09.216555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:31:09.216591 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 01:31:09.21658468 +0000 UTC m=+430.781427406 I0421 01:31:09.219826 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 01:31:09.219818413 +0000 UTC m=+430.784661129 I0421 01:31:09.220876 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 01:31:09.220866682 +0000 UTC m=+430.785709398 I0421 01:31:09.221507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:31:09.221580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:31:09.221652 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 01:31:09.221647437 +0000 UTC m=+430.786490143 I0421 01:31:09.221746 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 01:31:09.221729239 +0000 UTC m=+430.786571955 I0421 01:31:09.221758 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 01:31:09.221751369 +0000 UTC m=+430.786594095 I0421 01:31:09.373545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:09.376042 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 01:31:09.376031684 +0000 UTC m=+430.940874400 I0421 01:31:09.379905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:09.379997 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 01:31:09.37999008 +0000 UTC m=+430.944832796 I0421 01:31:09.382840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:09.382936 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 01:31:09.382930206 +0000 UTC m=+430.947772922 I0421 01:31:09.819969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:09.820970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:09.825211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:10.053761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p5vw5" condition "Approved" to 2026-04-21 01:31:10.053751093 +0000 UTC m=+431.618593819 I0421 01:31:10.055721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lb2w2" condition "Approved" to 2026-04-21 01:31:10.055710961 +0000 UTC m=+431.620553677 I0421 01:31:10.056343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r2jcx" condition "Approved" to 2026-04-21 01:31:10.056339733 +0000 UTC m=+431.621182449 I0421 01:31:10.130827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p5vw5" condition "Ready" to 2026-04-21 01:31:10.130816545 +0000 UTC m=+431.695659271 I0421 01:31:10.131393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lb2w2" condition "Ready" to 2026-04-21 01:31:10.131379186 +0000 UTC m=+431.696221902 I0421 01:31:10.132288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r2jcx" condition "Ready" to 2026-04-21 01:31:10.132276753 +0000 UTC m=+431.697119479 I0421 01:31:10.361004 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:31:10.360988228 +0000 UTC m=+431.925830954 I0421 01:31:10.361753 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:31:10.361736652 +0000 UTC m=+431.926579408 I0421 01:31:10.361806 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:31:10.361799334 +0000 UTC m=+431.926642070 I0421 01:31:10.593288 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:31:10.593270932 +0000 UTC m=+432.158113688 I0421 01:31:10.598800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:10.604530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:10.604899 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:31:10.604889874 +0000 UTC m=+432.169732590 I0421 01:31:10.605214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:10.605450 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:31:10.605443824 +0000 UTC m=+432.170286540 I0421 01:31:10.774535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:10.830810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:10.906397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:10.945722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:11.005124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:21.219887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:31:21.219932 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls" condition "Issuing" to 2026-04-21 01:31:21.219920697 +0000 UTC m=+442.784763453 I0421 01:31:21.220208 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls" condition "Ready" to 2026-04-21 01:31:21.220198462 +0000 UTC m=+442.785041218 I0421 01:31:21.235271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:21.235450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:31:21.235569 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls" condition "Issuing" to 2026-04-21 01:31:21.235488374 +0000 UTC m=+442.800331130 I0421 01:31:21.387910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:21.393570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cxj4t-nmkm6" condition "Approved" to 2026-04-21 01:31:21.393557804 +0000 UTC m=+442.958400530 I0421 01:31:21.415199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cxj4t-nmkm6" condition "Ready" to 2026-04-21 01:31:21.415184096 +0000 UTC m=+442.980026822 I0421 01:31:21.451281 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:31:21.451262884 +0000 UTC m=+443.016105610 I0421 01:31:21.467661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cxj4t-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:33.695085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:31:33.695118 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 01:31:33.695109137 +0000 UTC m=+455.259951873 I0421 01:31:33.695226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 01:31:33.69519178 +0000 UTC m=+455.260034496 I0421 01:31:33.712188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:33.712243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:31:33.712353 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 01:31:33.712344906 +0000 UTC m=+455.277187632 I0421 01:31:34.056999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-98rjj" condition "Approved" to 2026-04-21 01:31:34.056988565 +0000 UTC m=+455.621831281 I0421 01:31:34.074664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-98rjj" condition "Ready" to 2026-04-21 01:31:34.074653541 +0000 UTC m=+455.639496257 I0421 01:31:34.102605 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:31:34.102592302 +0000 UTC m=+455.667435028 I0421 01:31:34.130433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:31:34.187103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:34:49.926023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:34:49.926096 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 01:34:49.926086314 +0000 UTC m=+651.490929070 I0421 01:34:49.926376 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 01:34:49.926357359 +0000 UTC m=+651.491200105 I0421 01:34:49.949095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:34:49.949288 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 01:34:49.949275787 +0000 UTC m=+651.514118543 I0421 01:34:50.090353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:34:50.124505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sd4xr" condition "Approved" to 2026-04-21 01:34:50.124488939 +0000 UTC m=+651.689331645 I0421 01:34:50.159756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sd4xr" condition "Ready" to 2026-04-21 01:34:50.159747327 +0000 UTC m=+651.724590043 I0421 01:34:50.192965 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:34:50.192952747 +0000 UTC m=+651.757795463 I0421 01:34:50.218510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:34:50.218963 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:34:50.218956832 +0000 UTC m=+651.783799548 I0421 01:34:50.234439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:34:50.237843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:35:35.160839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 01:35:35.160869 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-21 01:35:35.160862092 +0000 UTC m=+696.725704818 I0421 01:35:35.161448 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 01:35:35.161432884 +0000 UTC m=+696.726275620 I0421 01:35:35.183631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:35:35.183767 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 01:35:35.183760439 +0000 UTC m=+696.748603155 I0421 01:35:35.685490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 01:35:35.724175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zbf6q" condition "Approved" to 2026-04-21 01:35:35.724167336 +0000 UTC m=+697.289010052 I0421 01:35:35.744377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zbf6q" condition "Ready" to 2026-04-21 01:35:35.744367714 +0000 UTC m=+697.309210420 I0421 01:35:35.772688 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 01:35:35.772674361 +0000 UTC m=+697.337517077 I0421 01:35:35.803313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"