I0423 01:30:40.915470 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0423 01:30:40.915603 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0423 01:30:40.915699 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0423 01:30:40.924250 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0423 01:30:40.925171 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0423 01:30:40.925685 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0423 01:30:40.925730 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0423 01:30:40.928178 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0423 01:30:40.942600 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0423 01:30:40.942751 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0423 01:30:40.946855 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0423 01:30:40.951596 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0423 01:30:40.951941 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0423 01:30:40.952008 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0423 01:30:40.955370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0423 01:30:40.958033 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0423 01:30:40.960788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0423 01:30:40.963628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0423 01:30:40.966467 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0423 01:30:40.969464 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0423 01:30:40.979655 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0423 01:30:40.984616 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0423 01:30:40.987915 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0423 01:30:40.992825 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0423 01:30:40.993904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0423 01:30:40.996888 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0423 01:30:40.999263 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0423 01:30:41.002797 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0423 01:30:41.005524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0423 01:30:41.005627 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0423 01:30:41.007221 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0423 01:30:41.007272 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0423 01:30:41.007275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0423 01:30:41.011928 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 01:30:41.012163 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 01:30:41.015729 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 01:30:41.016283 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 01:30:41.042571 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 01:30:41.056455 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 01:30:41.073061 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 01:30:41.092487 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 01:30:41.104371 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 01:30:41.111347 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 01:30:53.780331 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-23 01:30:53.779737466 +0000 UTC m=+12.893447888 I0423 01:30:54.475026 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 01:30:54.475010558 +0000 UTC m=+13.588720960 I0423 01:30:54.475699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:30:54.475975 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 01:30:54.475786323 +0000 UTC m=+13.589496705 E0423 01:30:54.491732 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 01:30:54.491796 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-23 01:30:54.491788655 +0000 UTC m=+13.605499037 E0423 01:30:54.491816 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 01:30:54.500349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:30:54.500408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:30:54.500425 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 01:30:54.500420408 +0000 UTC m=+13.614130800 E0423 01:30:54.510775 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0423 01:30:54.513534 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 01:30:54.513588 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 01:30:54.515670 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0423 01:30:54.545282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:30:54.550228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lmn8r" condition "Approved" to 2026-04-23 01:30:54.550215066 +0000 UTC m=+13.663925448 I0423 01:30:54.569286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lmn8r" condition "Ready" to 2026-04-23 01:30:54.569276238 +0000 UTC m=+13.682986630 I0423 01:30:54.593687 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:30:54.593671968 +0000 UTC m=+13.707382360 I0423 01:30:54.616373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:30:54.616686 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:30:54.61667828 +0000 UTC m=+13.730388662 I0423 01:30:54.623025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:30:54.655590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:30:59.511775 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:30:59.511754946 +0000 UTC m=+18.625465358 I0423 01:31:22.720946 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:31:22.721242 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 01:31:22.721214063 +0000 UTC m=+41.834924455 I0423 01:31:22.721954 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-23 01:31:22.721947294 +0000 UTC m=+41.835657686 I0423 01:31:22.744599 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-23 01:31:22.744580617 +0000 UTC m=+41.858291009 I0423 01:31:22.755235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:31:22.755335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:31:22.755362 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 01:31:22.75535237 +0000 UTC m=+41.869062762 I0423 01:31:23.053985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:31:23.072670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6vkkq" condition "Approved" to 2026-04-23 01:31:23.072659016 +0000 UTC m=+42.186369398 I0423 01:31:23.103932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6vkkq" condition "Ready" to 2026-04-23 01:31:23.103917255 +0000 UTC m=+42.217627637 I0423 01:31:23.140460 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:31:23.140436137 +0000 UTC m=+42.254146549 I0423 01:31:23.160907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:31:23.161262 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:31:23.161252459 +0000 UTC m=+42.274962841 I0423 01:31:23.180270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:31:23.198464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:35:35.522675 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready" to 2026-04-23 01:35:35.522631997 +0000 UTC m=+294.636342419 I0423 01:35:35.523053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:35:35.523098 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-04-23 01:35:35.52309187 +0000 UTC m=+294.636802242 I0423 01:35:35.549972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:35:35.550146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:35:35.550196 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-04-23 01:35:35.55018689 +0000 UTC m=+294.663897282 I0423 01:35:35.856205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-wvqjr" condition "Approved" to 2026-04-23 01:35:35.856190997 +0000 UTC m=+294.969901399 I0423 01:35:35.884522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-wvqjr" condition "Ready" to 2026-04-23 01:35:35.884512131 +0000 UTC m=+294.998222513 I0423 01:35:35.907835 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:35:35.907819987 +0000 UTC m=+295.021530379 I0423 01:35:35.927990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:36:39.663613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:36:39.663837 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 01:36:39.663783174 +0000 UTC m=+358.777493556 I0423 01:36:39.664731 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-23 01:36:39.663643662 +0000 UTC m=+358.777354084 E0423 01:36:39.678125 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 01:36:39.678162 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-23 01:36:39.678155044 +0000 UTC m=+358.791865426 E0423 01:36:39.678201 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 01:36:39.679041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:36:39.679128 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:36:39.679205 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-23 01:36:39.679194246 +0000 UTC m=+358.792904668 E0423 01:36:39.691361 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0423 01:36:39.691403 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 01:36:39.691426 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 01:36:39.691576 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0423 01:36:39.711596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9wq7t" condition "Approved" to 2026-04-23 01:36:39.711584782 +0000 UTC m=+358.825295174 I0423 01:36:39.732041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9wq7t" condition "Ready" to 2026-04-23 01:36:39.732029422 +0000 UTC m=+358.845739804 I0423 01:36:39.753826 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:36:39.753811461 +0000 UTC m=+358.867521843 I0423 01:36:39.768584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:36:39.768778 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:36:39.768773682 +0000 UTC m=+358.882484064 I0423 01:36:39.783315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:36:39.789727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:36:44.692108 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:36:44.692085153 +0000 UTC m=+363.805795575 I0423 01:37:27.340012 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 01:37:27.339999168 +0000 UTC m=+406.453709560 I0423 01:37:27.340070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:37:27.342042 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-23 01:37:27.342018166 +0000 UTC m=+406.455728688 I0423 01:37:27.342621 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:37:27.342650 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 01:37:27.342645677 +0000 UTC m=+406.456356069 I0423 01:37:27.343050 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-23 01:37:27.343044375 +0000 UTC m=+406.456754767 I0423 01:37:27.343483 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-23 01:37:27.343478113 +0000 UTC m=+406.457188505 I0423 01:37:27.343643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:37:27.343663 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 01:37:27.343658857 +0000 UTC m=+406.457369249 I0423 01:37:27.404222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:27.404304 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 01:37:27.404292379 +0000 UTC m=+406.518002791 I0423 01:37:27.408154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:27.408488 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-23 01:37:27.408479277 +0000 UTC m=+406.522189699 I0423 01:37:27.411104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:27.411165 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-23 01:37:27.411156947 +0000 UTC m=+406.524867339 I0423 01:37:27.531045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:27.572906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9k9q8" condition "Approved" to 2026-04-23 01:37:27.572891633 +0000 UTC m=+406.686602025 I0423 01:37:27.586478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:27.592441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9k9q8" condition "Ready" to 2026-04-23 01:37:27.592430045 +0000 UTC m=+406.706140437 I0423 01:37:27.616382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b895j" condition "Approved" to 2026-04-23 01:37:27.616372459 +0000 UTC m=+406.730082841 I0423 01:37:27.651513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b895j" condition "Ready" to 2026-04-23 01:37:27.65150156 +0000 UTC m=+406.765211962 I0423 01:37:27.671333 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:37:27.671323717 +0000 UTC m=+406.785034099 I0423 01:37:27.688553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:27.688846 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:37:27.688840241 +0000 UTC m=+406.802550633 I0423 01:37:27.705023 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:37:27.705008341 +0000 UTC m=+406.818718723 I0423 01:37:27.705396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:27.818268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:27.818600 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:37:27.818591925 +0000 UTC m=+406.932302317 I0423 01:37:27.871202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:28.222138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vwtv5" condition "Approved" to 2026-04-23 01:37:28.222125898 +0000 UTC m=+407.335836290 I0423 01:37:28.269324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:28.319344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:28.706660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vwtv5" condition "Ready" to 2026-04-23 01:37:28.70665136 +0000 UTC m=+407.820361742 I0423 01:37:28.925640 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:37:28.925627086 +0000 UTC m=+408.039337498 I0423 01:37:29.016052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:29.016734 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:37:29.016724929 +0000 UTC m=+408.130435321 I0423 01:37:29.269291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:29.316006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:37.034233 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtjct-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:37:37.034265 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xtjct-tls" condition "Issuing" to 2026-04-23 01:37:37.034254257 +0000 UTC m=+416.147964639 I0423 01:37:37.034717 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xtjct-tls" condition "Ready" to 2026-04-23 01:37:37.034713715 +0000 UTC m=+416.148424097 I0423 01:37:37.050305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtjct-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xtjct-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:37.050374 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xtjct-tls" condition "Ready" to 2026-04-23 01:37:37.050367807 +0000 UTC m=+416.164078179 I0423 01:37:37.271221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtjct-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xtjct-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:37.547930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xtjct-knnbb" condition "Approved" to 2026-04-23 01:37:37.54791293 +0000 UTC m=+416.661623322 I0423 01:37:37.738178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xtjct-knnbb" condition "Ready" to 2026-04-23 01:37:37.738165091 +0000 UTC m=+416.851875493 I0423 01:37:38.102763 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xtjct-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:37:38.102743072 +0000 UTC m=+417.216453464 I0423 01:37:38.135040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtjct-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xtjct-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:52.237591 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-23 01:37:52.237573421 +0000 UTC m=+431.351283803 I0423 01:37:52.238648 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:37:52.238673 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 01:37:52.238668219 +0000 UTC m=+431.352378601 I0423 01:37:52.255542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:52.255734 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:37:52.255784 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 01:37:52.255756477 +0000 UTC m=+431.369466869 I0423 01:37:52.534753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zchdc" condition "Approved" to 2026-04-23 01:37:52.534737452 +0000 UTC m=+431.648447834 I0423 01:37:52.567102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zchdc" condition "Ready" to 2026-04-23 01:37:52.567093754 +0000 UTC m=+431.680804136 I0423 01:37:52.610008 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:37:52.609991829 +0000 UTC m=+431.723702211 I0423 01:37:52.636273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:52.636522 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:37:52.636517449 +0000 UTC m=+431.750227831 I0423 01:37:52.649637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:37:52.649922 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:37:52.649914282 +0000 UTC m=+431.763624654 I0423 01:37:52.651333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:41:15.481135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:41:15.481248 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 01:41:15.481221562 +0000 UTC m=+634.594931954 I0423 01:41:15.482228 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-23 01:41:15.482212815 +0000 UTC m=+634.595923207 I0423 01:41:15.500528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:41:15.500601 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-23 01:41:15.500592576 +0000 UTC m=+634.614302948 I0423 01:41:15.648054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:41:15.688963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hg2q5" condition "Approved" to 2026-04-23 01:41:15.688945946 +0000 UTC m=+634.802656318 I0423 01:41:15.712462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hg2q5" condition "Ready" to 2026-04-23 01:41:15.712449785 +0000 UTC m=+634.826160177 I0423 01:41:15.746767 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:41:15.746751134 +0000 UTC m=+634.860461516 I0423 01:41:15.770494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:41:15.771047 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:41:15.771036723 +0000 UTC m=+634.884747145 I0423 01:41:15.788267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:41:15.803323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:42:08.837047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 01:42:08.837115 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-23 01:42:08.837105454 +0000 UTC m=+687.950815846 I0423 01:42:08.837641 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 01:42:08.837634331 +0000 UTC m=+687.951344713 I0423 01:42:08.860691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:42:08.860816 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 01:42:08.860804506 +0000 UTC m=+687.974514898 I0423 01:42:09.029280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 01:42:09.074803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mpppz" condition "Approved" to 2026-04-23 01:42:09.074786072 +0000 UTC m=+688.188496464 I0423 01:42:09.098885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mpppz" condition "Ready" to 2026-04-23 01:42:09.098867799 +0000 UTC m=+688.212578191 I0423 01:42:09.132729 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 01:42:09.13271299 +0000 UTC m=+688.246423382 I0423 01:42:09.160595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"