I0628 10:53:10.904484 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0628 10:53:10.904713 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0628 10:53:10.907763 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0628 10:53:10.907814 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0628 10:53:10.907840 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0628 10:53:10.908284 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0628 10:53:10.908357 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0628 10:53:10.908374 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0628 10:53:10.910775 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0628 10:53:10.927348 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0628 10:53:10.934563 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0628 10:53:10.938714 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0628 10:53:10.941964 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0628 10:53:10.943662 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0628 10:53:10.943681 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0628 10:53:10.943819 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0628 10:53:10.949010 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0628 10:53:10.949044 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0628 10:53:10.949124 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0628 10:53:10.951787 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0628 10:53:10.954743 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0628 10:53:10.957835 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0628 10:53:10.959624 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0628 10:53:10.962453 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0628 10:53:10.962717 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0628 10:53:10.968835 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0628 10:53:10.973187 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0628 10:53:10.975111 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0628 10:53:10.977018 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0628 10:53:10.979014 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0628 10:53:10.980950 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0628 10:53:10.982700 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0628 10:53:10.987512 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0628 10:53:10.987582 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0628 10:53:10.990200 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:10.990854 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:10.991041 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:10.991157 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:10.991757 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:11.010712 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:11.027817 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:11.042037 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:11.060290 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:11.079231 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:11.096790 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0628 10:53:23.991367 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-28 10:53:23.991343944 +0000 UTC m=+13.121871139 I0628 10:53:24.670937 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-28 10:53:24.670918219 +0000 UTC m=+13.801445404 I0628 10:53:24.671133 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:53:24.671197 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-28 10:53:24.671190475 +0000 UTC m=+13.801717660 E0628 10:53:24.683838 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 10:53:24.683908 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-28 10:53:24.683901798 +0000 UTC m=+13.814428963 E0628 10:53:24.683927 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 10:53:24.685335 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:53:24.685385 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:53:24.685406 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-28 10:53:24.685401542 +0000 UTC m=+13.815928707 E0628 10:53:24.693500 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0628 10:53:24.695561 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 10:53:24.695648 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 10:53:24.695694 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0628 10:53:24.727208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-28 10:53:24.727198215 +0000 UTC m=+13.857725380 I0628 10:53:24.748713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-28 10:53:24.7487011 +0000 UTC m=+13.879228275 I0628 10:53:24.770662 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:53:24.770648766 +0000 UTC m=+13.901175961 I0628 10:53:24.786136 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:53:24.787069 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:53:24.787060023 +0000 UTC m=+13.917587198 I0628 10:53:24.797621 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:53:24.797957 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:53:24.797947224 +0000 UTC m=+13.928474389 I0628 10:53:29.694374 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:53:29.694354666 +0000 UTC m=+18.824881851 I0628 10:53:51.906445 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:53:51.906729 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-28 10:53:51.906711653 +0000 UTC m=+41.037238818 I0628 10:53:51.906754 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-28 10:53:51.906750074 +0000 UTC m=+41.037277239 I0628 10:53:51.916154 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-28 10:53:51.916144475 +0000 UTC m=+41.046671630 I0628 10:53:51.923004 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:53:51.923204 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-28 10:53:51.923191099 +0000 UTC m=+41.053718294 I0628 10:53:52.102838 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:53:52.131144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-28 10:53:52.131131931 +0000 UTC m=+41.261659126 I0628 10:53:52.154660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-28 10:53:52.154647309 +0000 UTC m=+41.285174484 I0628 10:53:52.180367 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:53:52.180351989 +0000 UTC m=+41.310879174 I0628 10:53:52.194318 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:53:52.194847 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:53:52.194840175 +0000 UTC m=+41.325367330 I0628 10:53:52.210432 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:57:46.088860 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-86.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:57:46.088909 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-86.nip.io-tls" condition "Ready" to 2026-06-28 10:57:46.088888534 +0000 UTC m=+275.219415699 I0628 10:57:46.089001 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-86.nip.io-tls" condition "Issuing" to 2026-06-28 10:57:46.088989396 +0000 UTC m=+275.219516581 I0628 10:57:46.104816 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-86.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-86.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:57:46.104875 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-86.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:57:46.104898 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-86.nip.io-tls" condition "Issuing" to 2026-06-28 10:57:46.104892257 +0000 UTC m=+275.235419422 I0628 10:57:46.460509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-86.nip.io-tls-1" condition "Approved" to 2026-06-28 10:57:46.460498579 +0000 UTC m=+275.591025734 I0628 10:57:46.474882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-86.nip.io-tls-1" condition "Ready" to 2026-06-28 10:57:46.474867503 +0000 UTC m=+275.605394698 I0628 10:57:46.493726 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-86.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:57:46.493715894 +0000 UTC m=+275.624243059 I0628 10:57:46.509597 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-86.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-86.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:58:50.895195 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-28 10:58:50.895171946 +0000 UTC m=+340.025699111 I0628 10:58:50.895312 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:58:50.895409 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-28 10:58:50.895398721 +0000 UTC m=+340.025925886 I0628 10:58:50.905605 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:58:50.905839 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:58:50.905878 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-28 10:58:50.905869551 +0000 UTC m=+340.036396726 E0628 10:58:50.906415 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 10:58:50.906542 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-28 10:58:50.906529814 +0000 UTC m=+340.037057019 E0628 10:58:50.906581 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 10:58:50.915550 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0628 10:58:50.916208 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 10:58:50.916256 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 10:58:50.916291 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0628 10:58:50.939288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-28 10:58:50.939272072 +0000 UTC m=+340.069799247 I0628 10:58:50.953043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-28 10:58:50.953033528 +0000 UTC m=+340.083560693 I0628 10:58:50.976566 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:58:50.976552711 +0000 UTC m=+340.107079886 I0628 10:58:50.987479 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:58:55.916017 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:58:55.91597882 +0000 UTC m=+345.046506015 I0628 10:59:44.724125 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:59:44.724395 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-28 10:59:44.724343012 +0000 UTC m=+393.854870167 I0628 10:59:44.727444 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:59:44.733527 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-28 10:59:44.733464217 +0000 UTC m=+393.863991372 I0628 10:59:44.727485 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:59:44.733951 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-28 10:59:44.733946606 +0000 UTC m=+393.864473761 I0628 10:59:44.727483 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-28 10:59:44.727477789 +0000 UTC m=+393.858004954 I0628 10:59:44.727539 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-28 10:59:44.727529519 +0000 UTC m=+393.858056684 I0628 10:59:44.733261 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-28 10:59:44.733237863 +0000 UTC m=+393.863765078 I0628 10:59:44.774565 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:44.774612 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-28 10:59:44.774606359 +0000 UTC m=+393.905133514 I0628 10:59:44.781141 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:44.784178 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:59:44.784219 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-28 10:59:44.784205343 +0000 UTC m=+393.914732498 I0628 10:59:44.789583 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:44.789680 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-28 10:59:44.789659091 +0000 UTC m=+393.920186236 I0628 10:59:45.066333 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:45.092927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-28 10:59:45.092916793 +0000 UTC m=+394.223443948 I0628 10:59:45.109153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-28 10:59:45.109142805 +0000 UTC m=+394.239669980 I0628 10:59:45.135281 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:59:45.135270386 +0000 UTC m=+394.265797551 I0628 10:59:45.150389 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:45.151211 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:59:45.151202203 +0000 UTC m=+394.281729388 I0628 10:59:45.173417 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:45.179662 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:45.233310 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:45.276492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-28 10:59:45.27648305 +0000 UTC m=+394.407010205 I0628 10:59:45.289441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-28 10:59:45.289420294 +0000 UTC m=+394.419947449 I0628 10:59:45.344317 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:59:45.344306712 +0000 UTC m=+394.474833887 I0628 10:59:45.357279 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:45.358303 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:59:45.358292494 +0000 UTC m=+394.488819689 I0628 10:59:45.398338 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:45.651653 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:45.707633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-28 10:59:45.707614539 +0000 UTC m=+394.838141734 I0628 10:59:45.765267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-28 10:59:45.765257618 +0000 UTC m=+394.895784783 I0628 10:59:46.253955 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:59:46.253939686 +0000 UTC m=+395.384466881 I0628 10:59:46.350399 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:46.350953 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:59:46.350946342 +0000 UTC m=+395.481473507 I0628 10:59:46.599502 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:46.648723 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:53.242860 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls" condition "Ready" to 2026-06-28 10:59:53.242829263 +0000 UTC m=+402.373356428 I0628 10:59:53.242878 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 10:59:53.243022 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls" condition "Issuing" to 2026-06-28 10:59:53.243011796 +0000 UTC m=+402.373538991 I0628 10:59:53.255318 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:53.255587 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls" condition "Ready" to 2026-06-28 10:59:53.25557341 +0000 UTC m=+402.386100605 I0628 10:59:53.345844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:53.378175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls-1" condition "Approved" to 2026-06-28 10:59:53.37815797 +0000 UTC m=+402.508685155 I0628 10:59:53.389981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls-1" condition "Ready" to 2026-06-28 10:59:53.38997094 +0000 UTC m=+402.520498105 I0628 10:59:53.410393 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:59:53.410381303 +0000 UTC m=+402.540908478 I0628 10:59:53.421974 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 10:59:53.422574 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 10:59:53.4225675 +0000 UTC m=+402.553094655 I0628 10:59:53.438634 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dv8b8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:00:06.331428 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 11:00:06.331498 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-28 11:00:06.331486391 +0000 UTC m=+415.462013556 I0628 11:00:06.331909 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-28 11:00:06.331893458 +0000 UTC m=+415.462420623 I0628 11:00:06.345097 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:00:06.345221 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-28 11:00:06.345215621 +0000 UTC m=+415.475742786 I0628 11:00:06.801183 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:00:06.825530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-28 11:00:06.825521327 +0000 UTC m=+415.956048482 I0628 11:00:06.858137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-28 11:00:06.858125825 +0000 UTC m=+415.988652980 I0628 11:00:06.885182 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 11:00:06.885172897 +0000 UTC m=+416.015700062 I0628 11:00:06.902209 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:00:06.904125 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 11:00:06.904116447 +0000 UTC m=+416.034643612 I0628 11:00:06.906516 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:00:06.917326 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:00:06.918030 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 11:00:06.918019329 +0000 UTC m=+416.048546494 I0628 11:03:23.401943 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 11:03:23.402010 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-28 11:03:23.402001316 +0000 UTC m=+612.532528471 I0628 11:03:23.402174 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-28 11:03:23.402151318 +0000 UTC m=+612.532678513 I0628 11:03:23.415856 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:03:23.415955 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 11:03:23.415997 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-28 11:03:23.415985114 +0000 UTC m=+612.546512279 I0628 11:03:23.575177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-28 11:03:23.575163622 +0000 UTC m=+612.705690807 I0628 11:03:23.589488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-28 11:03:23.589478395 +0000 UTC m=+612.720005550 I0628 11:03:23.609360 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 11:03:23.609342721 +0000 UTC m=+612.739869886 I0628 11:03:23.622083 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:03:23.622813 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 11:03:23.62280333 +0000 UTC m=+612.753330495 I0628 11:03:23.637617 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:03:23.641575 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:04:06.710135 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-28 11:04:06.710113265 +0000 UTC m=+655.840640470 I0628 11:04:06.710220 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 11:04:06.710263 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-28 11:04:06.710256467 +0000 UTC m=+655.840783632 I0628 11:04:06.725324 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:04:06.725410 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 11:04:06.725437 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-28 11:04:06.72542855 +0000 UTC m=+655.855955715 I0628 11:04:07.101130 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:04:07.110067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-28 11:04:07.110045706 +0000 UTC m=+656.240572901 I0628 11:04:07.127172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-28 11:04:07.127162487 +0000 UTC m=+656.257689642 I0628 11:04:07.146870 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 11:04:07.146859446 +0000 UTC m=+656.277386591 I0628 11:04:07.159900 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:04:07.160341 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 11:04:07.160334994 +0000 UTC m=+656.290862149 I0628 11:04:07.169244 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 11:04:07.179297 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"