I0419 13:25:17.407003 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0419 13:25:17.407171 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0419 13:25:17.407337 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0419 13:25:17.410242 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0419 13:25:17.410509 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0419 13:25:17.410592 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0419 13:25:17.410623 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0419 13:25:17.412168 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0419 13:25:17.427113 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0419 13:25:17.431607 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0419 13:25:17.437317 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0419 13:25:17.443272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0419 13:25:17.447373 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0419 13:25:17.450425 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0419 13:25:17.452758 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0419 13:25:17.452808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0419 13:25:17.455380 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0419 13:25:17.457797 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0419 13:25:17.463997 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0419 13:25:17.466693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0419 13:25:17.469207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0419 13:25:17.471778 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0419 13:25:17.471825 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0419 13:25:17.471941 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0419 13:25:17.471958 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0419 13:25:17.471874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0419 13:25:17.474788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0419 13:25:17.477420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0419 13:25:17.479263 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0419 13:25:17.481237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0419 13:25:17.486107 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0419 13:25:17.486168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0419 13:25:17.488956 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0419 13:25:17.491271 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:17.492333 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:17.492933 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:17.493406 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:17.517288 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:17.528718 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:17.550748 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:17.563326 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:17.574597 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:17.580460 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:25:35.501161 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-19 13:25:35.501139702 +0000 UTC m=+18.122492683 I0419 13:25:36.201693 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-19 13:25:36.201680233 +0000 UTC m=+18.823033214 I0419 13:25:36.202255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:25:36.202372 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-19 13:25:36.20235837 +0000 UTC m=+18.823711391 E0419 13:25:36.223908 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:25:36.224023 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-19 13:25:36.224012513 +0000 UTC m=+18.845365504 E0419 13:25:36.224056 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:25:36.228579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:25:36.228804 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-19 13:25:36.228790193 +0000 UTC m=+18.850143204 E0419 13:25:36.239247 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0419 13:25:36.239509 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:25:36.239659 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:25:36.239759 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0419 13:25:36.244472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:25:36.244559 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-19 13:25:36.244548648 +0000 UTC m=+18.865901629 I0419 13:25:36.251801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gxx74" condition "Approved" to 2026-04-19 13:25:36.25177942 +0000 UTC m=+18.873132441 I0419 13:25:36.264278 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-19 13:25:36.264267103 +0000 UTC m=+18.885620114 I0419 13:25:36.265816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gxx74" condition "Ready" to 2026-04-19 13:25:36.265807892 +0000 UTC m=+18.887160873 I0419 13:25:36.273676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:25:36.285118 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:25:36.285100865 +0000 UTC m=+18.906453866 I0419 13:25:36.302028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:25:36.345490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:25:41.240752 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:25:41.240742608 +0000 UTC m=+23.862095589 I0419 13:26:03.174340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:26:03.174380 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-19 13:26:03.174373067 +0000 UTC m=+45.795726038 I0419 13:26:03.174975 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-19 13:26:03.174970172 +0000 UTC m=+45.796323143 I0419 13:26:03.201707 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-19 13:26:03.201696081 +0000 UTC m=+45.823049072 I0419 13:26:03.203980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:03.204040 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-19 13:26:03.20403374 +0000 UTC m=+45.825386731 I0419 13:26:03.855180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:03.891531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mqtjg" condition "Approved" to 2026-04-19 13:26:03.891521277 +0000 UTC m=+46.512874258 I0419 13:26:03.923673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mqtjg" condition "Ready" to 2026-04-19 13:26:03.923662083 +0000 UTC m=+46.545015064 I0419 13:26:03.960920 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:26:03.960905789 +0000 UTC m=+46.582258770 I0419 13:26:03.989032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:03.989472 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:26:03.989464704 +0000 UTC m=+46.610817675 I0419 13:26:04.024317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:26:04.025045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:30:55.137095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-200.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:30:55.137117 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-200.nip.io-tls" condition "Ready" to 2026-04-19 13:30:55.137097251 +0000 UTC m=+337.758450222 I0419 13:30:55.137164 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-200.nip.io-tls" condition "Issuing" to 2026-04-19 13:30:55.137135722 +0000 UTC m=+337.758488693 I0419 13:30:55.169479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:30:55.169560 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-200.nip.io-tls" condition "Ready" to 2026-04-19 13:30:55.169552423 +0000 UTC m=+337.790905394 I0419 13:30:55.487072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:30:55.533076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-200.nip.io-tls-vj7sz" condition "Approved" to 2026-04-19 13:30:55.533065481 +0000 UTC m=+338.154418462 I0419 13:30:55.563258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-200.nip.io-tls-vj7sz" condition "Ready" to 2026-04-19 13:30:55.563248682 +0000 UTC m=+338.184601663 I0419 13:30:55.591817 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-200.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:30:55.591807988 +0000 UTC m=+338.213160969 I0419 13:30:55.607683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:55.852210 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-19 13:31:55.852195699 +0000 UTC m=+398.473548670 I0419 13:31:55.852698 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:31:55.852733 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-19 13:31:55.852727001 +0000 UTC m=+398.474079972 E0419 13:31:55.864548 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:31:55.864595 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-19 13:31:55.864584494 +0000 UTC m=+398.485937475 E0419 13:31:55.864807 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:31:55.867284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:31:55.867408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:31:55.867467 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-19 13:31:55.86745754 +0000 UTC m=+398.488810551 E0419 13:31:55.877089 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0419 13:31:55.877147 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:31:55.877176 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:31:55.877505 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0419 13:31:55.902316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n44fl" condition "Approved" to 2026-04-19 13:31:55.902302482 +0000 UTC m=+398.523655473 I0419 13:31:55.917755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n44fl" condition "Ready" to 2026-04-19 13:31:55.917743508 +0000 UTC m=+398.539096499 I0419 13:31:55.935683 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:31:55.9356732 +0000 UTC m=+398.557026181 I0419 13:31:55.951775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:00.877592 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:00.877583488 +0000 UTC m=+403.498936459 I0419 13:32:41.533950 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-19 13:32:41.533936573 +0000 UTC m=+444.155289544 I0419 13:32:41.534248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:32:41.534269 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 13:32:41.534266671 +0000 UTC m=+444.155619642 I0419 13:32:41.544567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:32:41.544602 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-19 13:32:41.544595715 +0000 UTC m=+444.165948686 I0419 13:32:41.544605 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-19 13:32:41.544591485 +0000 UTC m=+444.165944466 I0419 13:32:41.544815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:32:41.544848 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-19 13:32:41.54484133 +0000 UTC m=+444.166194311 I0419 13:32:41.544457 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-19 13:32:41.544446651 +0000 UTC m=+444.165799632 I0419 13:32:41.574935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:41.574983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:32:41.574997 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 13:32:41.574993341 +0000 UTC m=+444.196346302 I0419 13:32:41.596105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:41.598627 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-19 13:32:41.598612417 +0000 UTC m=+444.219965418 I0419 13:32:41.613632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:41.613958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:32:41.614023 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-19 13:32:41.61401572 +0000 UTC m=+444.235368711 I0419 13:32:41.769165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:41.774096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ffbmg" condition "Approved" to 2026-04-19 13:32:41.774084972 +0000 UTC m=+444.395437953 I0419 13:32:41.786205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:41.793912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ffbmg" condition "Ready" to 2026-04-19 13:32:41.793904789 +0000 UTC m=+444.415257760 I0419 13:32:41.820966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b7bv7" condition "Approved" to 2026-04-19 13:32:41.820955847 +0000 UTC m=+444.442308848 I0419 13:32:41.841743 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:41.841733356 +0000 UTC m=+444.463086347 I0419 13:32:41.850559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b7bv7" condition "Ready" to 2026-04-19 13:32:41.850552124 +0000 UTC m=+444.471905095 I0419 13:32:41.883360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:41.883746 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:41.883739536 +0000 UTC m=+444.505092537 I0419 13:32:41.903227 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:41.903216965 +0000 UTC m=+444.524569936 I0419 13:32:41.922387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:42.068556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:42.068843 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:42.068837438 +0000 UTC m=+444.690190419 I0419 13:32:42.198337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v4z4q" condition "Approved" to 2026-04-19 13:32:42.198328531 +0000 UTC m=+444.819681502 I0419 13:32:42.665077 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:42.665063172 +0000 UTC m=+445.286416173 I0419 13:32:42.666243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v4z4q" condition "Ready" to 2026-04-19 13:32:42.66623117 +0000 UTC m=+445.287584151 I0419 13:32:42.792686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:42.815181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:43.104280 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:43.104270317 +0000 UTC m=+445.725623278 I0419 13:32:43.201891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:43.202290 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:43.202284228 +0000 UTC m=+445.823637209 I0419 13:32:43.353926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:55.335867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:32:55.335924 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls" condition "Issuing" to 2026-04-19 13:32:55.33591001 +0000 UTC m=+457.957263031 I0419 13:32:55.336673 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls" condition "Ready" to 2026-04-19 13:32:55.336661357 +0000 UTC m=+457.958014368 I0419 13:32:55.355038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:55.355247 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls" condition "Ready" to 2026-04-19 13:32:55.355209247 +0000 UTC m=+457.976562228 I0419 13:32:55.592712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:55.656875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pjtw2-62jx5" condition "Approved" to 2026-04-19 13:32:55.656861105 +0000 UTC m=+458.278214086 I0419 13:32:55.785125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pjtw2-62jx5" condition "Ready" to 2026-04-19 13:32:55.785115483 +0000 UTC m=+458.406468464 I0419 13:32:55.993315 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:55.993300527 +0000 UTC m=+458.614653508 I0419 13:32:56.039110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:32:56.039473 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:32:56.039465771 +0000 UTC m=+458.660818752 I0419 13:32:56.128824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pjtw2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:11.086136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:11.086168 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-19 13:33:11.086160991 +0000 UTC m=+473.707513972 I0419 13:33:11.086579 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 13:33:11.086573971 +0000 UTC m=+473.707926952 I0419 13:33:11.102092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:11.102261 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 13:33:11.102222323 +0000 UTC m=+473.723575334 I0419 13:33:11.378006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:11.418680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nfg4m" condition "Approved" to 2026-04-19 13:33:11.418665984 +0000 UTC m=+474.040018965 I0419 13:33:11.435867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nfg4m" condition "Ready" to 2026-04-19 13:33:11.435857224 +0000 UTC m=+474.057210195 I0419 13:33:11.469222 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:11.469207329 +0000 UTC m=+474.090560310 I0419 13:33:11.495678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:36:25.260265 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-19 13:36:25.260245194 +0000 UTC m=+667.881598205 I0419 13:36:25.260249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:36:25.260519 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-19 13:36:25.26047242 +0000 UTC m=+667.881825431 I0419 13:36:25.279045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:36:25.279122 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:36:25.279143 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-19 13:36:25.279136619 +0000 UTC m=+667.900489610 I0419 13:36:25.484291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-25lt6" condition "Approved" to 2026-04-19 13:36:25.484276598 +0000 UTC m=+668.105629609 I0419 13:36:25.506720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-25lt6" condition "Ready" to 2026-04-19 13:36:25.50668543 +0000 UTC m=+668.128038411 I0419 13:36:25.535632 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:36:25.535623292 +0000 UTC m=+668.156976273 I0419 13:36:25.562585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:36:25.564293 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:36:25.564282107 +0000 UTC m=+668.185635088 I0419 13:36:25.576239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:36:25.577249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:36:25.577579 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:36:25.577572204 +0000 UTC m=+668.198925185 I0419 13:37:04.453605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:37:04.453661 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-19 13:37:04.453654564 +0000 UTC m=+707.075007545 I0419 13:37:04.453859 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-19 13:37:04.453848229 +0000 UTC m=+707.075201200 I0419 13:37:04.469951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:04.470225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:37:04.470292 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-19 13:37:04.470258415 +0000 UTC m=+707.091611386 I0419 13:37:04.690989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hw7b2" condition "Approved" to 2026-04-19 13:37:04.690981322 +0000 UTC m=+707.312334293 I0419 13:37:04.710713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hw7b2" condition "Ready" to 2026-04-19 13:37:04.710704433 +0000 UTC m=+707.332057404 I0419 13:37:04.735947 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:37:04.735937714 +0000 UTC m=+707.357290685 I0419 13:37:04.761552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"