I0604 06:25:00.215190 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0604 06:25:00.215286 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0604 06:25:00.215352 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0604 06:25:00.219259 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0604 06:25:00.219713 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0604 06:25:00.219817 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0604 06:25:00.219950 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0604 06:25:00.223148 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0604 06:25:00.240332 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0604 06:25:00.245159 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0604 06:25:00.245282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0604 06:25:00.252602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0604 06:25:00.255141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0604 06:25:00.257647 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0604 06:25:00.259924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0604 06:25:00.262535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0604 06:25:00.264370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0604 06:25:00.266420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0604 06:25:00.273570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0604 06:25:00.276487 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0604 06:25:00.278883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0604 06:25:00.281159 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0604 06:25:00.281188 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0604 06:25:00.281200 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0604 06:25:00.281209 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0604 06:25:00.281279 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0604 06:25:00.283879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0604 06:25:00.286462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0604 06:25:00.288167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0604 06:25:00.289860 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0604 06:25:00.289965 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0604 06:25:00.297872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0604 06:25:00.302476 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0604 06:25:00.304274 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 06:25:00.305217 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 06:25:00.305828 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 06:25:00.320958 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 06:25:00.331914 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 06:25:00.349816 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 06:25:00.365113 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 06:25:00.382254 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 06:25:00.388034 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 06:25:00.400103 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 06:25:15.949702 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-04 06:25:15.949679853 +0000 UTC m=+15.771480301 I0604 06:25:16.662862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:25:16.662901 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-04 06:25:16.662894289 +0000 UTC m=+16.484694697 I0604 06:25:16.663637 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-04 06:25:16.663633003 +0000 UTC m=+16.485433411 E0604 06:25:16.677994 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0604 06:25:16.678040 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-04 06:25:16.678034933 +0000 UTC m=+16.499835351 E0604 06:25:16.678061 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0604 06:25:16.681200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:25:16.681314 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-04 06:25:16.68130567 +0000 UTC m=+16.503106108 E0604 06:25:16.690839 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0604 06:25:16.690982 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0604 06:25:16.691207 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0604 06:25:16.691266 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0604 06:25:16.701233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:25:16.723478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vzcmr" condition "Approved" to 2026-06-04 06:25:16.723468287 +0000 UTC m=+16.545268695 I0604 06:25:16.735912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vzcmr" condition "Ready" to 2026-06-04 06:25:16.735904753 +0000 UTC m=+16.557705171 I0604 06:25:16.755821 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:25:16.755809253 +0000 UTC m=+16.577609671 I0604 06:25:16.774162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:25:16.774583 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:25:16.774575666 +0000 UTC m=+16.596376084 I0604 06:25:16.790913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:25:21.692062 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:25:21.692048414 +0000 UTC m=+21.513848852 I0604 06:25:42.646839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:25:42.646903 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-04 06:25:42.646891397 +0000 UTC m=+42.468691815 I0604 06:25:42.647074 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-04 06:25:42.647053941 +0000 UTC m=+42.468854349 I0604 06:25:42.656291 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-04 06:25:42.656282719 +0000 UTC m=+42.478083127 I0604 06:25:42.681208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:25:42.681273 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:25:42.681293 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-04 06:25:42.681287123 +0000 UTC m=+42.503087541 I0604 06:25:42.970916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pjg5k" condition "Approved" to 2026-06-04 06:25:42.970903332 +0000 UTC m=+42.792703770 I0604 06:25:43.013489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pjg5k" condition "Ready" to 2026-06-04 06:25:43.013470877 +0000 UTC m=+42.835271275 I0604 06:25:43.046139 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:25:43.046126921 +0000 UTC m=+42.867927339 I0604 06:25:43.074558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:25:43.078759 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:25:43.078750914 +0000 UTC m=+42.900551322 I0604 06:25:43.112573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:25:43.114437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:29:40.582773 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-06-04 06:29:40.582021287 +0000 UTC m=+280.403821725 I0604 06:29:40.583641 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:29:40.583674 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Issuing" to 2026-06-04 06:29:40.583667267 +0000 UTC m=+280.405467705 I0604 06:29:40.599211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:29:40.599273 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:29:40.599290 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Issuing" to 2026-06-04 06:29:40.599283541 +0000 UTC m=+280.421083979 I0604 06:29:40.714457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-srv5p" condition "Approved" to 2026-06-04 06:29:40.71443774 +0000 UTC m=+280.536238188 I0604 06:29:40.744007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-srv5p" condition "Ready" to 2026-06-04 06:29:40.743995018 +0000 UTC m=+280.565795436 I0604 06:29:40.768994 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:29:40.76898167 +0000 UTC m=+280.590782088 I0604 06:29:40.791611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:29:40.792091 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:29:40.792084255 +0000 UTC m=+280.613884653 I0604 06:29:40.816454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:30:44.291234 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-04 06:30:44.291211732 +0000 UTC m=+344.113012170 I0604 06:30:44.291369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:30:44.292503 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-04 06:30:44.292491778 +0000 UTC m=+344.114292226 E0604 06:30:44.306721 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0604 06:30:44.306788 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-04 06:30:44.30677968 +0000 UTC m=+344.128580098 E0604 06:30:44.306810 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0604 06:30:44.314445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:30:44.314514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:30:44.314537 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-04 06:30:44.314531568 +0000 UTC m=+344.136331966 E0604 06:30:44.320223 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0604 06:30:44.320308 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0604 06:30:44.320339 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0604 06:30:44.320379 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0604 06:30:44.353139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9nj65" condition "Approved" to 2026-06-04 06:30:44.353128544 +0000 UTC m=+344.174928962 I0604 06:30:44.367075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9nj65" condition "Ready" to 2026-06-04 06:30:44.367065066 +0000 UTC m=+344.188865484 I0604 06:30:44.389838 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:30:44.389829247 +0000 UTC m=+344.211629665 I0604 06:30:44.405586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:30:44.405819 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:30:44.405814276 +0000 UTC m=+344.227614694 I0604 06:30:44.420703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:30:49.320750 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:30:49.320741114 +0000 UTC m=+349.142541532 I0604 06:31:28.738922 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-04 06:31:28.738889889 +0000 UTC m=+388.560690297 I0604 06:31:28.739192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:31:28.739270 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-04 06:31:28.739263738 +0000 UTC m=+388.561064146 I0604 06:31:28.753874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:31:28.753906 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-04 06:31:28.753899167 +0000 UTC m=+388.575699575 I0604 06:31:28.754161 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-04 06:31:28.754157414 +0000 UTC m=+388.575957812 I0604 06:31:28.756851 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-04 06:31:28.75684659 +0000 UTC m=+388.578646998 I0604 06:31:28.757024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:31:28.757040 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-04 06:31:28.757037524 +0000 UTC m=+388.578837932 I0604 06:31:28.863208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:28.863255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:31:28.863267 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-04 06:31:28.863263734 +0000 UTC m=+388.685064142 I0604 06:31:28.863721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:28.863783 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:31:28.863806 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-04 06:31:28.863801737 +0000 UTC m=+388.685602135 I0604 06:31:28.864076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:28.864148 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:31:28.864203 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-04 06:31:28.864194187 +0000 UTC m=+388.685994605 I0604 06:31:29.104037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:29.115990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2ggxq" condition "Approved" to 2026-06-04 06:31:29.115975243 +0000 UTC m=+388.937775681 I0604 06:31:29.148798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2ggxq" condition "Ready" to 2026-06-04 06:31:29.148788527 +0000 UTC m=+388.970588925 I0604 06:31:29.160033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2gglv" condition "Approved" to 2026-06-04 06:31:29.160019492 +0000 UTC m=+388.981819940 I0604 06:31:29.185359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2gglv" condition "Ready" to 2026-06-04 06:31:29.185338922 +0000 UTC m=+389.007139360 I0604 06:31:29.196037 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:31:29.196023244 +0000 UTC m=+389.017823672 I0604 06:31:29.215696 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:31:29.215688016 +0000 UTC m=+389.037488424 I0604 06:31:29.215738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:29.219693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:29.220153 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:31:29.220143785 +0000 UTC m=+389.041944223 I0604 06:31:29.227575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fdwf5" condition "Approved" to 2026-06-04 06:31:29.227567206 +0000 UTC m=+389.049367624 I0604 06:31:29.263983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:29.342050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:29.406685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fdwf5" condition "Ready" to 2026-06-04 06:31:29.406673244 +0000 UTC m=+389.228473662 I0604 06:31:30.015900 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:31:30.015878566 +0000 UTC m=+389.837678974 I0604 06:31:30.211014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:30.211312 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:31:30.211306691 +0000 UTC m=+390.033107089 I0604 06:31:30.460419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:30.509004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:35.347756 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkc47-tls" condition "Ready" to 2026-06-04 06:31:35.347718637 +0000 UTC m=+395.169519065 I0604 06:31:35.348602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xkc47-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:31:35.350471 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkc47-tls" condition "Issuing" to 2026-06-04 06:31:35.350451513 +0000 UTC m=+395.172251931 I0604 06:31:35.362503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xkc47-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xkc47-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:35.362570 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xkc47-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:31:35.362589 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkc47-tls" condition "Issuing" to 2026-06-04 06:31:35.362581275 +0000 UTC m=+395.184381693 I0604 06:31:35.553740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xkc47-fqrk9" condition "Approved" to 2026-06-04 06:31:35.553729692 +0000 UTC m=+395.375530110 I0604 06:31:35.625178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xkc47-fqrk9" condition "Ready" to 2026-06-04 06:31:35.625156914 +0000 UTC m=+395.446957352 I0604 06:31:35.722810 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkc47-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:31:35.722785717 +0000 UTC m=+395.544586165 I0604 06:31:35.883860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xkc47-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xkc47-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:35.884267 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkc47-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:31:35.884259549 +0000 UTC m=+395.706059957 I0604 06:31:35.933761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xkc47-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xkc47-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:49.434629 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-04 06:31:49.434583044 +0000 UTC m=+409.256383462 I0604 06:31:49.434666 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:31:49.434708 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-04 06:31:49.434699666 +0000 UTC m=+409.256500084 I0604 06:31:49.451123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:49.451209 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-04 06:31:49.45120181 +0000 UTC m=+409.273002228 I0604 06:31:49.801979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:49.833823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-stqnz" condition "Approved" to 2026-06-04 06:31:49.833808205 +0000 UTC m=+409.655608633 I0604 06:31:49.864468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-stqnz" condition "Ready" to 2026-06-04 06:31:49.864455547 +0000 UTC m=+409.686255965 I0604 06:31:49.903384 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:31:49.903373422 +0000 UTC m=+409.725173820 I0604 06:31:49.925327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:31:49.925564 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:31:49.925558118 +0000 UTC m=+409.747358526 I0604 06:31:49.962765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:35:05.516324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:35:05.516418 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-04 06:35:05.516407931 +0000 UTC m=+605.338208379 I0604 06:35:05.516663 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-04 06:35:05.516649295 +0000 UTC m=+605.338449703 I0604 06:35:05.533013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:35:05.533079 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-04 06:35:05.533071902 +0000 UTC m=+605.354872320 I0604 06:35:05.610076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:35:05.640930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-l7pw4" condition "Approved" to 2026-06-04 06:35:05.640918046 +0000 UTC m=+605.462718494 I0604 06:35:05.665135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-l7pw4" condition "Ready" to 2026-06-04 06:35:05.66512501 +0000 UTC m=+605.486925428 I0604 06:35:05.690335 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:35:05.69032475 +0000 UTC m=+605.512125158 I0604 06:35:05.725714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:35:05.726267 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:35:05.726259898 +0000 UTC m=+605.548060326 I0604 06:35:05.743423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:35:05.743890 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:35:05.743882976 +0000 UTC m=+605.565683384 I0604 06:35:05.746029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:35:43.700768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:35:43.700817 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-04 06:35:43.700794638 +0000 UTC m=+643.522595056 I0604 06:35:43.701132 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-04 06:35:43.701127013 +0000 UTC m=+643.522927431 I0604 06:35:43.718432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:35:43.718560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 06:35:43.718606 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-04 06:35:43.718598842 +0000 UTC m=+643.540399260 I0604 06:35:44.072075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7p6cq" condition "Approved" to 2026-06-04 06:35:44.072064124 +0000 UTC m=+643.893864542 I0604 06:35:44.093106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7p6cq" condition "Ready" to 2026-06-04 06:35:44.093096672 +0000 UTC m=+643.914897080 I0604 06:35:44.122986 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:35:44.122976352 +0000 UTC m=+643.944776770 I0604 06:35:44.149659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:35:44.149860 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:35:44.14985429 +0000 UTC m=+643.971654698 I0604 06:35:44.169045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 06:35:44.169310 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 06:35:44.169269872 +0000 UTC m=+643.991070290