I0617 15:04:33.881864 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0617 15:04:33.882052 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0617 15:04:33.882167 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0617 15:04:33.888003 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0617 15:04:33.888680 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0617 15:04:33.888713 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0617 15:04:33.888768 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0617 15:04:33.892721 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0617 15:04:33.905089 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0617 15:04:33.909273 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0617 15:04:33.909379 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0617 15:04:33.912123 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0617 15:04:33.919547 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0617 15:04:33.922547 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0617 15:04:33.924982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0617 15:04:33.927535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0617 15:04:33.929934 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0617 15:04:33.932434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0617 15:04:33.936573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0617 15:04:33.941706 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0617 15:04:33.941739 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0617 15:04:33.941937 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0617 15:04:33.946204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0617 15:04:33.949736 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0617 15:04:33.951766 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0617 15:04:33.951786 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0617 15:04:33.951793 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0617 15:04:33.951877 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0617 15:04:33.953701 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0617 15:04:33.955479 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0617 15:04:33.957131 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0617 15:04:33.959147 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0617 15:04:33.962872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0617 15:04:33.965265 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 15:04:33.965658 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 15:04:33.967436 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 15:04:33.978372 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 15:04:33.991691 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 15:04:34.011349 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 15:04:34.020220 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 15:04:34.038327 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 15:04:34.048569 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 15:04:34.055152 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 15:04:48.290743 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-17 15:04:48.290727636 +0000 UTC m=+14.437658864 I0617 15:04:48.977210 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-17 15:04:48.977194326 +0000 UTC m=+15.124125554 I0617 15:04:48.977286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:04:48.977452 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-17 15:04:48.977441272 +0000 UTC m=+15.124372500 E0617 15:04:48.994387 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0617 15:04:48.994446 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-17 15:04:48.99443985 +0000 UTC m=+15.141371058 E0617 15:04:48.994469 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0617 15:04:48.994515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:04:48.994598 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-17 15:04:48.994591325 +0000 UTC m=+15.141522533 E0617 15:04:49.009968 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0617 15:04:49.010094 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 15:04:49.010134 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 15:04:49.010598 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0617 15:04:49.012956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:04:49.013186 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-17 15:04:49.013165532 +0000 UTC m=+15.160096740 I0617 15:04:49.022537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9xnvg" condition "Approved" to 2026-06-17 15:04:49.022521348 +0000 UTC m=+15.169452546 I0617 15:04:49.033878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9xnvg" condition "Ready" to 2026-06-17 15:04:49.033867834 +0000 UTC m=+15.180799042 I0617 15:04:49.056565 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:04:49.056550835 +0000 UTC m=+15.203482043 I0617 15:04:49.070412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:04:49.071637 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:04:49.071627105 +0000 UTC m=+15.218558313 I0617 15:04:49.099610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:04:49.099880 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:04:49.099871966 +0000 UTC m=+15.246803174 I0617 15:04:54.010713 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:04:54.010697921 +0000 UTC m=+20.157629129 I0617 15:05:20.722188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:05:20.722233 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-17 15:05:20.722223553 +0000 UTC m=+46.869154761 I0617 15:05:20.722528 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-17 15:05:20.722511591 +0000 UTC m=+46.869442799 I0617 15:05:20.734994 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-17 15:05:20.734980875 +0000 UTC m=+46.881912073 I0617 15:05:20.740806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:05:20.740996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:05:20.741089 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-17 15:05:20.741079418 +0000 UTC m=+46.888010646 I0617 15:05:20.914889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:05:20.922358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-f47fv" condition "Approved" to 2026-06-17 15:05:20.9223501 +0000 UTC m=+47.069281308 I0617 15:05:20.950461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-f47fv" condition "Ready" to 2026-06-17 15:05:20.950448167 +0000 UTC m=+47.097379395 I0617 15:05:20.984295 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:05:20.984276228 +0000 UTC m=+47.131207436 I0617 15:05:21.009492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:05:21.010109 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:05:21.010099748 +0000 UTC m=+47.157030966 I0617 15:05:21.036307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:09:15.563746 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-250.nip.io-tls" condition "Ready" to 2026-06-17 15:09:15.563725932 +0000 UTC m=+281.710657170 I0617 15:09:15.564393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-250.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:09:15.564453 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-250.nip.io-tls" condition "Issuing" to 2026-06-17 15:09:15.564422229 +0000 UTC m=+281.711353477 I0617 15:09:15.575979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:09:15.576105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-250.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:09:15.576155 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-250.nip.io-tls" condition "Issuing" to 2026-06-17 15:09:15.576146102 +0000 UTC m=+281.723077330 I0617 15:09:15.693982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-250.nip.io-tls-9xmht" condition "Approved" to 2026-06-17 15:09:15.693972053 +0000 UTC m=+281.840903261 I0617 15:09:15.720796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-250.nip.io-tls-9xmht" condition "Ready" to 2026-06-17 15:09:15.720783905 +0000 UTC m=+281.867715113 I0617 15:09:15.745224 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:09:15.745212257 +0000 UTC m=+281.892143465 I0617 15:09:15.770829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:10:20.640988 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:10:20.641017 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-17 15:10:20.641009205 +0000 UTC m=+346.787940423 I0617 15:10:20.641040 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-17 15:10:20.641008725 +0000 UTC m=+346.787939963 I0617 15:10:20.657931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:10:20.658298 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-17 15:10:20.658290338 +0000 UTC m=+346.805221556 E0617 15:10:20.658741 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0617 15:10:20.658868 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-17 15:10:20.658847442 +0000 UTC m=+346.805778650 E0617 15:10:20.658978 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 15:10:20.672675 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0617 15:10:20.672772 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 15:10:20.672991 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 15:10:20.673046 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0617 15:10:20.675291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:10:20.697752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sk6qs" condition "Approved" to 2026-06-17 15:10:20.697740245 +0000 UTC m=+346.844671453 I0617 15:10:20.712229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sk6qs" condition "Ready" to 2026-06-17 15:10:20.712218517 +0000 UTC m=+346.859149725 I0617 15:10:20.740478 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:10:20.740465824 +0000 UTC m=+346.887397022 I0617 15:10:20.759179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:10:25.673718 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:10:25.673705507 +0000 UTC m=+351.820636735 I0617 15:11:06.034903 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-17 15:11:06.034892889 +0000 UTC m=+392.181824087 I0617 15:11:06.035033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:11:06.035050 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-17 15:11:06.035047154 +0000 UTC m=+392.181978352 I0617 15:11:06.054553 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-17 15:11:06.05453554 +0000 UTC m=+392.201466828 I0617 15:11:06.056813 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:11:06.056868 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-17 15:11:06.056858469 +0000 UTC m=+392.203789687 I0617 15:11:06.059415 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-17 15:11:06.059400482 +0000 UTC m=+392.206331690 I0617 15:11:06.060182 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:11:06.060206 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-17 15:11:06.060201433 +0000 UTC m=+392.207132641 I0617 15:11:06.062968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:06.064904 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-17 15:11:06.06489717 +0000 UTC m=+392.211828368 I0617 15:11:06.077416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:06.077458 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:11:06.077472 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-17 15:11:06.077467445 +0000 UTC m=+392.224398643 I0617 15:11:06.081454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:06.081588 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:11:06.081683 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-17 15:11:06.081671539 +0000 UTC m=+392.228602747 I0617 15:11:06.218304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:06.227230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qffqq" condition "Approved" to 2026-06-17 15:11:06.227219878 +0000 UTC m=+392.374151086 I0617 15:11:06.237897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:06.249779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qffqq" condition "Ready" to 2026-06-17 15:11:06.249769932 +0000 UTC m=+392.396701130 I0617 15:11:06.288218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-92888" condition "Approved" to 2026-06-17 15:11:06.288202443 +0000 UTC m=+392.435133681 I0617 15:11:06.301949 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:11:06.301936076 +0000 UTC m=+392.448867284 I0617 15:11:06.307223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-92888" condition "Ready" to 2026-06-17 15:11:06.307213699 +0000 UTC m=+392.454144897 I0617 15:11:06.327278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zn62p" condition "Approved" to 2026-06-17 15:11:06.32726643 +0000 UTC m=+392.474197638 I0617 15:11:06.337046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:06.337384 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:11:06.337378422 +0000 UTC m=+392.484309620 I0617 15:11:06.871856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zn62p" condition "Ready" to 2026-06-17 15:11:06.871838985 +0000 UTC m=+393.018770213 I0617 15:11:06.888687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:06.919889 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:11:06.919876625 +0000 UTC m=+393.066807823 I0617 15:11:07.349803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:07.350212 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:11:07.350205285 +0000 UTC m=+393.497136483 I0617 15:11:07.378240 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:11:07.378227855 +0000 UTC m=+393.525159063 I0617 15:11:07.473928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:07.474287 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:11:07.474281897 +0000 UTC m=+393.621213105 I0617 15:11:07.528539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:07.825312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:07.878684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:16.150563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:11:16.150598 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" condition "Issuing" to 2026-06-17 15:11:16.150590923 +0000 UTC m=+402.297522131 I0617 15:11:16.151413 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" condition "Ready" to 2026-06-17 15:11:16.151392684 +0000 UTC m=+402.298323882 I0617 15:11:16.167690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:16.167767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:11:16.167794 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" condition "Issuing" to 2026-06-17 15:11:16.167785484 +0000 UTC m=+402.314716712 I0617 15:11:16.478249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gbjq9-tcq6r" condition "Approved" to 2026-06-17 15:11:16.478235214 +0000 UTC m=+402.625166412 I0617 15:11:16.494251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gbjq9-tcq6r" condition "Ready" to 2026-06-17 15:11:16.494242414 +0000 UTC m=+402.641173602 I0617 15:11:16.537132 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:11:16.537108296 +0000 UTC m=+402.684039484 I0617 15:11:16.553272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:16.553505 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:11:16.553497756 +0000 UTC m=+402.700428964 I0617 15:11:16.574420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:16.576304 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gbjq9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:11:16.576294665 +0000 UTC m=+402.723225883 I0617 15:11:30.558856 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-17 15:11:30.558829845 +0000 UTC m=+416.705761083 I0617 15:11:30.559366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:11:30.559431 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-17 15:11:30.559419709 +0000 UTC m=+416.706350897 I0617 15:11:30.573469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:30.573597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:11:30.573626 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-17 15:11:30.573618884 +0000 UTC m=+416.720550112 I0617 15:11:30.796173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fvvxg" condition "Approved" to 2026-06-17 15:11:30.796157136 +0000 UTC m=+416.943088324 I0617 15:11:30.819133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fvvxg" condition "Ready" to 2026-06-17 15:11:30.819121981 +0000 UTC m=+416.966053179 I0617 15:11:30.849822 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:11:30.849812718 +0000 UTC m=+416.996743926 I0617 15:11:30.886232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:30.927467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:11:30.936496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:14:59.097485 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-17 15:14:59.097463701 +0000 UTC m=+625.244394929 I0617 15:14:59.097785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:14:59.097842 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-17 15:14:59.09783437 +0000 UTC m=+625.244765608 I0617 15:14:59.115873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:14:59.116000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:14:59.116028 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-17 15:14:59.116021854 +0000 UTC m=+625.262953062 I0617 15:14:59.526694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-brdzs" condition "Approved" to 2026-06-17 15:14:59.526681835 +0000 UTC m=+625.673613063 I0617 15:14:59.546404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-brdzs" condition "Ready" to 2026-06-17 15:14:59.546394147 +0000 UTC m=+625.693325335 I0617 15:14:59.577805 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:14:59.577671468 +0000 UTC m=+625.724602676 I0617 15:14:59.590719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:14:59.591063 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:14:59.591057111 +0000 UTC m=+625.737988319 I0617 15:14:59.616868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:15:41.289331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 15:15:41.289431 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-17 15:15:41.289412083 +0000 UTC m=+667.436343321 I0617 15:15:41.289361 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-17 15:15:41.289354351 +0000 UTC m=+667.436285559 I0617 15:15:41.306937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:15:41.307007 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-17 15:15:41.306999762 +0000 UTC m=+667.453930970 I0617 15:15:41.818818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 15:15:41.844674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gx8xn" condition "Approved" to 2026-06-17 15:15:41.844662486 +0000 UTC m=+667.991593694 I0617 15:15:41.861557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gx8xn" condition "Ready" to 2026-06-17 15:15:41.861548308 +0000 UTC m=+668.008479506 I0617 15:15:41.882690 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 15:15:41.882680344 +0000 UTC m=+668.029611532 I0617 15:15:41.906159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"