I0615 18:59:45.521869 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0615 18:59:45.522115 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0615 18:59:45.522310 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0615 18:59:45.526513 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0615 18:59:45.526863 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0615 18:59:45.526989 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0615 18:59:45.527000 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0615 18:59:45.529146 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0615 18:59:45.549375 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0615 18:59:45.554981 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0615 18:59:45.560078 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0615 18:59:45.560211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0615 18:59:45.565243 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0615 18:59:45.565291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0615 18:59:45.567961 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0615 18:59:45.569995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0615 18:59:45.571959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0615 18:59:45.574015 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0615 18:59:45.575869 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0615 18:59:45.577496 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0615 18:59:45.577568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0615 18:59:45.583240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0615 18:59:45.584935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0615 18:59:45.586850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0615 18:59:45.589132 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0615 18:59:45.590428 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0615 18:59:45.590450 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0615 18:59:45.590457 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0615 18:59:45.590567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0615 18:59:45.592358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0615 18:59:45.597361 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0615 18:59:45.601957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0615 18:59:45.607559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0615 18:59:45.609413 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 18:59:45.613013 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 18:59:45.613016 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 18:59:45.633521 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 18:59:45.652988 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 18:59:45.666961 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 18:59:45.685086 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 18:59:45.699139 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 18:59:45.708300 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 18:59:45.727870 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:00:04.839442 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-15 19:00:04.839407266 +0000 UTC m=+19.363286373 I0615 19:00:05.626183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:00:05.626296 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 19:00:05.626286304 +0000 UTC m=+20.150165431 I0615 19:00:05.626677 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-15 19:00:05.626442497 +0000 UTC m=+20.150321614 E0615 19:00:05.641715 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 19:00:05.641912 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-15 19:00:05.641899578 +0000 UTC m=+20.165778675 E0615 19:00:05.642306 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 19:00:05.648139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:00:05.648257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:00:05.648312 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 19:00:05.648302774 +0000 UTC m=+20.172181871 E0615 19:00:05.663930 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0615 19:00:05.664215 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 19:00:05.664293 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 19:00:05.664433 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0615 19:00:05.685538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:00:05.695573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k986m" condition "Approved" to 2026-06-15 19:00:05.695561043 +0000 UTC m=+20.219440130 I0615 19:00:05.712155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k986m" condition "Ready" to 2026-06-15 19:00:05.712138464 +0000 UTC m=+20.236017561 I0615 19:00:05.740659 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:00:05.740643692 +0000 UTC m=+20.264522789 I0615 19:00:05.764012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:00:05.764315 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:00:05.764306522 +0000 UTC m=+20.288185619 I0615 19:00:05.786018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:00:05.786521 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:00:05.786509135 +0000 UTC m=+20.310388222 I0615 19:00:10.664622 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:00:10.6645957 +0000 UTC m=+25.188474817 I0615 19:00:34.684350 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-15 19:00:34.684328744 +0000 UTC m=+49.208207871 I0615 19:00:34.685004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:00:34.685041 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 19:00:34.685033955 +0000 UTC m=+49.208913082 I0615 19:00:34.697974 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-15 19:00:34.697966603 +0000 UTC m=+49.221845690 I0615 19:00:34.713849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:00:34.713908 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-15 19:00:34.713902457 +0000 UTC m=+49.237781544 I0615 19:00:34.859242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:00:34.893120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4jzzd" condition "Approved" to 2026-06-15 19:00:34.89310204 +0000 UTC m=+49.416981167 I0615 19:00:34.925662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4jzzd" condition "Ready" to 2026-06-15 19:00:34.925647609 +0000 UTC m=+49.449526706 I0615 19:00:34.959671 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:00:34.959658279 +0000 UTC m=+49.483537356 I0615 19:00:34.983841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:00:34.984221 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:00:34.984213295 +0000 UTC m=+49.508092382 I0615 19:00:34.993314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:00:35.015014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:05:50.506660 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Ready" to 2026-06-15 19:05:50.506641354 +0000 UTC m=+365.030520481 I0615 19:05:50.507457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-237.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:05:50.507488 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Issuing" to 2026-06-15 19:05:50.507481848 +0000 UTC m=+365.031360965 I0615 19:05:50.536395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:05:50.536451 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-237.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:05:50.536463 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Issuing" to 2026-06-15 19:05:50.536459252 +0000 UTC m=+365.060338339 I0615 19:05:50.758263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-237.nip.io-tls-zsc48" condition "Approved" to 2026-06-15 19:05:50.758247876 +0000 UTC m=+365.282127003 I0615 19:05:50.794090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-237.nip.io-tls-zsc48" condition "Ready" to 2026-06-15 19:05:50.794067309 +0000 UTC m=+365.317946426 I0615 19:05:50.823941 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:05:50.823926189 +0000 UTC m=+365.347805286 I0615 19:05:50.845872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:05:50.895129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:06:55.962443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:06:55.962632 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-15 19:06:55.962618838 +0000 UTC m=+430.486497955 I0615 19:06:55.963430 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 19:06:55.963420961 +0000 UTC m=+430.487300078 E0615 19:06:55.976902 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 19:06:55.977181 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-15 19:06:55.977174815 +0000 UTC m=+430.501053912 E0615 19:06:55.977220 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 19:06:55.978399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:06:55.978476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:06:55.978530 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-15 19:06:55.978525625 +0000 UTC m=+430.502404722 E0615 19:06:55.987540 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0615 19:06:55.987957 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 19:06:55.988088 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 19:06:55.988226 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0615 19:06:56.017399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-w9b74" condition "Approved" to 2026-06-15 19:06:56.01738723 +0000 UTC m=+430.541266357 I0615 19:06:56.034780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-w9b74" condition "Ready" to 2026-06-15 19:06:56.03477247 +0000 UTC m=+430.558651557 I0615 19:06:56.059487 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:06:56.059476544 +0000 UTC m=+430.583355641 I0615 19:06:56.076254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:06:56.076630 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:06:56.07662191 +0000 UTC m=+430.600501007 I0615 19:06:56.092480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:06:56.101313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:00.988861 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:07:00.988847641 +0000 UTC m=+435.512726738 I0615 19:07:46.168106 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-15 19:07:46.168090215 +0000 UTC m=+480.691969312 I0615 19:07:46.168763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:07:46.168862 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-15 19:07:46.168853776 +0000 UTC m=+480.692732853 I0615 19:07:46.179649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:07:46.180321 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-15 19:07:46.179670254 +0000 UTC m=+480.703549341 I0615 19:07:46.181414 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-15 19:07:46.181408949 +0000 UTC m=+480.705288036 I0615 19:07:46.181635 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:07:46.181652 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-15 19:07:46.181648822 +0000 UTC m=+480.705527909 I0615 19:07:46.181822 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-15 19:07:46.181804085 +0000 UTC m=+480.705683162 I0615 19:07:46.254673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:46.254848 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-15 19:07:46.254837835 +0000 UTC m=+480.778716932 I0615 19:07:46.254928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:46.254986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:46.255018 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-15 19:07:46.255005847 +0000 UTC m=+480.778884954 I0615 19:07:46.255035 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:07:46.255078 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-15 19:07:46.255072568 +0000 UTC m=+480.778951645 I0615 19:07:46.398131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:46.440225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:46.440399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2tgdz" condition "Approved" to 2026-06-15 19:07:46.440371579 +0000 UTC m=+480.964250676 I0615 19:07:46.469144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2tgdz" condition "Ready" to 2026-06-15 19:07:46.46912392 +0000 UTC m=+480.993003017 I0615 19:07:46.469287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:46.488318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dc4lk" condition "Approved" to 2026-06-15 19:07:46.488301901 +0000 UTC m=+481.012180998 I0615 19:07:46.488615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jvfm6" condition "Approved" to 2026-06-15 19:07:46.488609745 +0000 UTC m=+481.012488842 I0615 19:07:46.509313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jvfm6" condition "Ready" to 2026-06-15 19:07:46.509298747 +0000 UTC m=+481.033177824 I0615 19:07:46.526071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dc4lk" condition "Ready" to 2026-06-15 19:07:46.526048002 +0000 UTC m=+481.049927089 I0615 19:07:46.559872 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:07:46.559853007 +0000 UTC m=+481.083732104 I0615 19:07:46.861369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:46.861974 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:07:46.861966178 +0000 UTC m=+481.385845275 I0615 19:07:46.959353 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:07:46.959335053 +0000 UTC m=+481.483214170 I0615 19:07:47.090936 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:07:47.090907677 +0000 UTC m=+481.614786794 I0615 19:07:47.309216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:47.310090 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:07:47.310077211 +0000 UTC m=+481.833956328 I0615 19:07:47.416365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:47.416867 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:07:47.416858052 +0000 UTC m=+481.940737149 I0615 19:07:47.461979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:47.869630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:47.965249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:48.007704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:56.345977 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-szrzz-tls" condition "Ready" to 2026-06-15 19:07:56.345961689 +0000 UTC m=+490.869840796 I0615 19:07:56.346372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-szrzz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:07:56.346392 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-szrzz-tls" condition "Issuing" to 2026-06-15 19:07:56.346388275 +0000 UTC m=+490.870267372 I0615 19:07:56.368280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-szrzz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-szrzz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:56.368722 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-szrzz-tls" condition "Ready" to 2026-06-15 19:07:56.368711508 +0000 UTC m=+490.892590605 I0615 19:07:56.523225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-szrzz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-szrzz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:56.561537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-szrzz-s84zw" condition "Approved" to 2026-06-15 19:07:56.561523603 +0000 UTC m=+491.085402700 I0615 19:07:56.589042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-szrzz-s84zw" condition "Ready" to 2026-06-15 19:07:56.589027021 +0000 UTC m=+491.112906138 I0615 19:07:56.629653 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-szrzz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:07:56.629641519 +0000 UTC m=+491.153520616 I0615 19:07:56.649422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-szrzz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-szrzz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:07:56.649978 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-szrzz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:07:56.649965014 +0000 UTC m=+491.173844111 I0615 19:07:56.668274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-szrzz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-szrzz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:08:11.120498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:08:11.120535 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-15 19:08:11.120527265 +0000 UTC m=+505.644406362 I0615 19:08:11.120618 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-15 19:08:11.120602486 +0000 UTC m=+505.644481573 I0615 19:08:11.157709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:08:11.157786 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-15 19:08:11.157778987 +0000 UTC m=+505.681658084 I0615 19:08:11.334656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:08:11.378518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j8cl2" condition "Approved" to 2026-06-15 19:08:11.378500384 +0000 UTC m=+505.902379481 I0615 19:08:11.406400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j8cl2" condition "Ready" to 2026-06-15 19:08:11.406388703 +0000 UTC m=+505.930267810 I0615 19:08:11.443699 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:08:11.443686486 +0000 UTC m=+505.967565563 I0615 19:08:11.479414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:08:11.479844 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:08:11.479837112 +0000 UTC m=+506.003716199 I0615 19:08:11.492261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:08:11.504299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:08:11.504600 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:08:11.504593737 +0000 UTC m=+506.028472814 I0615 19:11:36.246901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:11:36.247004 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-15 19:11:36.246989269 +0000 UTC m=+710.770868386 I0615 19:11:36.247263 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-15 19:11:36.247155404 +0000 UTC m=+710.771034501 I0615 19:11:36.264266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:11:36.264386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:11:36.264417 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-15 19:11:36.26440875 +0000 UTC m=+710.788287847 I0615 19:11:36.480976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:11:36.489748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bsdxs" condition "Approved" to 2026-06-15 19:11:36.489734203 +0000 UTC m=+711.013613280 I0615 19:11:36.510431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bsdxs" condition "Ready" to 2026-06-15 19:11:36.510419067 +0000 UTC m=+711.034298164 I0615 19:11:36.545986 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:11:36.545961953 +0000 UTC m=+711.069841040 I0615 19:11:36.576340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:12:17.483831 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-15 19:12:17.483812169 +0000 UTC m=+752.007691256 I0615 19:12:17.484456 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:12:17.484500 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 19:12:17.484496868 +0000 UTC m=+752.008375945 I0615 19:12:17.501376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:12:17.501508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:12:17.501541 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 19:12:17.501530825 +0000 UTC m=+752.025409912 I0615 19:12:17.689952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xzvp6" condition "Approved" to 2026-06-15 19:12:17.689926003 +0000 UTC m=+752.213805090 I0615 19:12:17.716298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xzvp6" condition "Ready" to 2026-06-15 19:12:17.716284312 +0000 UTC m=+752.240163399 I0615 19:12:17.742773 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:12:17.742747975 +0000 UTC m=+752.266627062 I0615 19:12:17.782167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"