I0626 03:31:48.205014 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0626 03:31:48.205185 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0626 03:31:48.205280 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0626 03:31:48.211830 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0626 03:31:48.212280 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0626 03:31:48.212385 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0626 03:31:48.212384 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0626 03:31:48.214780 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0626 03:31:48.229206 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0626 03:31:48.236454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0626 03:31:48.242850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0626 03:31:48.246825 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0626 03:31:48.246926 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0626 03:31:48.246864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0626 03:31:48.249550 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0626 03:31:48.251438 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0626 03:31:48.251568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0626 03:31:48.253374 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0626 03:31:48.253416 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0626 03:31:48.253454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0626 03:31:48.255272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0626 03:31:48.262093 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0626 03:31:48.266410 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0626 03:31:48.269584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0626 03:31:48.271583 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0626 03:31:48.273343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0626 03:31:48.275341 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0626 03:31:48.275487 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0626 03:31:48.277262 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0626 03:31:48.281863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0626 03:31:48.283838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0626 03:31:48.289261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0626 03:31:48.293186 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0626 03:31:48.296466 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 03:31:48.296595 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 03:31:48.297855 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 03:31:48.314914 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 03:31:48.331009 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 03:31:48.343753 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 03:31:48.355673 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 03:31:48.375733 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 03:31:48.389014 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 03:31:48.396359 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 03:32:01.506061 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-26 03:32:01.506041958 +0000 UTC m=+13.339444425 I0626 03:32:02.211290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:32:02.211364 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-26 03:32:02.211354056 +0000 UTC m=+14.044756513 I0626 03:32:02.211773 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-26 03:32:02.211764693 +0000 UTC m=+14.045167150 I0626 03:32:02.227717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:32:02.227785 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-26 03:32:02.227778666 +0000 UTC m=+14.061181133 E0626 03:32:02.228619 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 03:32:02.228736 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-26 03:32:02.228725641 +0000 UTC m=+14.062128068 E0626 03:32:02.228772 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 03:32:02.242310 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0626 03:32:02.242410 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 03:32:02.242590 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 03:32:02.242632 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0626 03:32:02.250371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:32:02.274566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-26pp5" condition "Approved" to 2026-06-26 03:32:02.274555778 +0000 UTC m=+14.107958205 I0626 03:32:02.287285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-26pp5" condition "Ready" to 2026-06-26 03:32:02.28727877 +0000 UTC m=+14.120681207 I0626 03:32:02.349690 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:32:02.349673108 +0000 UTC m=+14.183075535 I0626 03:32:02.381754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:32:02.384138 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:32:02.384122844 +0000 UTC m=+14.217525311 I0626 03:32:02.398954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:32:02.399371 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:32:02.399355556 +0000 UTC m=+14.232758013 I0626 03:32:07.242859 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:32:07.242843137 +0000 UTC m=+19.076245594 I0626 03:32:29.994135 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-26 03:32:29.994118608 +0000 UTC m=+41.827521045 I0626 03:32:29.994644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:32:29.994710 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-26 03:32:29.994698606 +0000 UTC m=+41.828101043 I0626 03:32:30.007629 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-26 03:32:30.007615417 +0000 UTC m=+41.841017844 I0626 03:32:30.027015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:32:30.027123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:32:30.027155 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-26 03:32:30.027146931 +0000 UTC m=+41.860549358 I0626 03:32:30.188027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:32:30.199868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rdllh" condition "Approved" to 2026-06-26 03:32:30.199850553 +0000 UTC m=+42.033252990 I0626 03:32:30.229598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rdllh" condition "Ready" to 2026-06-26 03:32:30.229576741 +0000 UTC m=+42.062979208 I0626 03:32:30.275972 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:32:30.275956161 +0000 UTC m=+42.109358598 I0626 03:32:30.297374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:32:30.365819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:36:53.247356 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Ready" to 2026-06-26 03:36:53.247338544 +0000 UTC m=+305.080740981 I0626 03:36:53.247389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:36:53.247575 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Issuing" to 2026-06-26 03:36:53.24755491 +0000 UTC m=+305.080957347 I0626 03:36:53.269690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:36:53.270164 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Ready" to 2026-06-26 03:36:53.270148381 +0000 UTC m=+305.103550838 I0626 03:36:53.442731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:36:53.469223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-205.nip.io-tls-lz8xc" condition "Approved" to 2026-06-26 03:36:53.469207339 +0000 UTC m=+305.302609796 I0626 03:36:53.493643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-205.nip.io-tls-lz8xc" condition "Ready" to 2026-06-26 03:36:53.493628533 +0000 UTC m=+305.327030990 I0626 03:36:53.528104 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:36:53.528095424 +0000 UTC m=+305.361497861 I0626 03:36:53.550992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:36:53.551366 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:36:53.551361851 +0000 UTC m=+305.384764288 I0626 03:36:53.564857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:36:53.565202 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:36:53.565191386 +0000 UTC m=+305.398593813 I0626 03:37:58.431948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:37:58.432267 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-26 03:37:58.432244448 +0000 UTC m=+370.265646925 I0626 03:37:58.432682 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-26 03:37:58.432657347 +0000 UTC m=+370.266059804 E0626 03:37:58.444949 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 03:37:58.445016 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-26 03:37:58.445001292 +0000 UTC m=+370.278403759 E0626 03:37:58.445101 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 03:37:58.449740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:37:58.449812 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:37:58.449833 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-26 03:37:58.449827668 +0000 UTC m=+370.283230095 E0626 03:37:58.460476 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0626 03:37:58.460818 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 03:37:58.460860 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 03:37:58.461010 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0626 03:37:58.487482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:37:58.493786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4sjv6" condition "Approved" to 2026-06-26 03:37:58.493775723 +0000 UTC m=+370.327178160 I0626 03:37:58.515815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4sjv6" condition "Ready" to 2026-06-26 03:37:58.515803462 +0000 UTC m=+370.349205899 I0626 03:37:58.554016 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:37:58.553999822 +0000 UTC m=+370.387402289 I0626 03:37:58.619313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:37:58.619682 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:37:58.619673 +0000 UTC m=+370.453075437 I0626 03:37:58.633794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:37:58.638996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:03.460990 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:38:03.460976121 +0000 UTC m=+375.294378588 I0626 03:38:46.581030 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-26 03:38:46.58102007 +0000 UTC m=+418.414422497 I0626 03:38:46.581384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:38:46.581416 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-26 03:38:46.581412147 +0000 UTC m=+418.414814584 I0626 03:38:46.588985 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-26 03:38:46.588976244 +0000 UTC m=+418.422378661 I0626 03:38:46.589166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:38:46.589190 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-26 03:38:46.589186228 +0000 UTC m=+418.422588665 I0626 03:38:46.589243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:38:46.589257 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-26 03:38:46.589254939 +0000 UTC m=+418.422657366 I0626 03:38:46.589492 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-26 03:38:46.589488963 +0000 UTC m=+418.422891390 I0626 03:38:46.619041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:46.619093 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-26 03:38:46.619088403 +0000 UTC m=+418.452490830 I0626 03:38:46.619295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:46.619323 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-26 03:38:46.619320507 +0000 UTC m=+418.452722934 I0626 03:38:46.625891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:46.625932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:38:46.625946 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-26 03:38:46.625942808 +0000 UTC m=+418.459345225 I0626 03:38:46.954653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:46.978585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2xql2" condition "Approved" to 2026-06-26 03:38:46.978575781 +0000 UTC m=+418.811978208 I0626 03:38:47.014771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2xql2" condition "Ready" to 2026-06-26 03:38:47.01476112 +0000 UTC m=+418.848163537 I0626 03:38:47.034556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:47.061539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:47.069968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dz58r" condition "Approved" to 2026-06-26 03:38:47.069954574 +0000 UTC m=+418.903357031 I0626 03:38:47.076702 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:38:47.076694307 +0000 UTC m=+418.910096724 I0626 03:38:47.078076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6kjtg" condition "Approved" to 2026-06-26 03:38:47.078072002 +0000 UTC m=+418.911474419 I0626 03:38:47.096037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dz58r" condition "Ready" to 2026-06-26 03:38:47.096027298 +0000 UTC m=+418.929429725 I0626 03:38:47.100238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:47.100999 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:38:47.100991278 +0000 UTC m=+418.934393705 I0626 03:38:47.103009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6kjtg" condition "Ready" to 2026-06-26 03:38:47.103001325 +0000 UTC m=+418.936403762 I0626 03:38:47.469467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:47.525127 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:38:47.525118272 +0000 UTC m=+419.358520699 I0626 03:38:47.631150 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:38:47.631133699 +0000 UTC m=+419.464536166 I0626 03:38:47.821612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:47.822015 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:38:47.82200788 +0000 UTC m=+419.655410307 I0626 03:38:47.919479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:38:48.173198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:39:00.800980 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" condition "Ready" to 2026-06-26 03:39:00.800966025 +0000 UTC m=+432.634368462 I0626 03:39:00.801362 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:39:00.801380 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" condition "Issuing" to 2026-06-26 03:39:00.801376732 +0000 UTC m=+432.634779169 I0626 03:39:00.836765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:39:00.836910 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" condition "Ready" to 2026-06-26 03:39:00.836898205 +0000 UTC m=+432.670300672 I0626 03:39:01.337837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:39:01.443458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jxmvj-prhvn" condition "Approved" to 2026-06-26 03:39:01.443448079 +0000 UTC m=+433.276850516 I0626 03:39:01.476134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jxmvj-prhvn" condition "Ready" to 2026-06-26 03:39:01.476125871 +0000 UTC m=+433.309528298 I0626 03:39:01.521301 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:39:01.521282925 +0000 UTC m=+433.354685382 I0626 03:39:01.582597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:39:01.583622 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:39:01.583608314 +0000 UTC m=+433.417010751 I0626 03:39:01.624392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:39:01.624720 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jxmvj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:39:01.624712646 +0000 UTC m=+433.458115083 I0626 03:39:16.726038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:39:16.726080 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-26 03:39:16.726070532 +0000 UTC m=+448.559472969 I0626 03:39:16.726186 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-26 03:39:16.726148933 +0000 UTC m=+448.559551390 I0626 03:39:16.930208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:39:16.930328 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-26 03:39:16.930316724 +0000 UTC m=+448.763719181 I0626 03:39:17.243748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:39:17.276718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-p56wx" condition "Approved" to 2026-06-26 03:39:17.276705967 +0000 UTC m=+449.110108394 I0626 03:39:17.300979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-p56wx" condition "Ready" to 2026-06-26 03:39:17.30096012 +0000 UTC m=+449.134362577 I0626 03:39:17.339649 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:39:17.339631673 +0000 UTC m=+449.173034130 I0626 03:39:17.366466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:39:17.369049 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:39:17.369037265 +0000 UTC m=+449.202439702 I0626 03:39:17.378277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:39:17.393139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:39:17.394470 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:39:17.394356086 +0000 UTC m=+449.227758513 I0626 03:42:37.739393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:42:37.739454 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-26 03:42:37.73944871 +0000 UTC m=+649.572851127 I0626 03:42:37.739823 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-26 03:42:37.739796975 +0000 UTC m=+649.573199412 I0626 03:42:37.762066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:42:37.762160 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-26 03:42:37.762148753 +0000 UTC m=+649.595551180 I0626 03:42:38.060023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:42:38.090246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cwb4p" condition "Approved" to 2026-06-26 03:42:38.090225861 +0000 UTC m=+649.923628288 I0626 03:42:38.113226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cwb4p" condition "Ready" to 2026-06-26 03:42:38.113208928 +0000 UTC m=+649.946611355 I0626 03:42:38.150585 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:42:38.150568352 +0000 UTC m=+649.983970789 I0626 03:42:38.170359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:43:22.009689 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-26 03:43:22.009672369 +0000 UTC m=+693.843074796 I0626 03:43:22.010030 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:43:22.010045 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-26 03:43:22.010042283 +0000 UTC m=+693.843444700 I0626 03:43:22.029582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 03:43:22.029630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 03:43:22.029644 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-26 03:43:22.029639144 +0000 UTC m=+693.863041581 I0626 03:43:22.171223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-c6kz4" condition "Approved" to 2026-06-26 03:43:22.171213861 +0000 UTC m=+694.004616288 I0626 03:43:22.193041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-c6kz4" condition "Ready" to 2026-06-26 03:43:22.193031157 +0000 UTC m=+694.026433594 I0626 03:43:22.224908 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 03:43:22.224892799 +0000 UTC m=+694.058295226 I0626 03:43:22.249963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"