I0616 00:53:20.521722 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0616 00:53:20.521929 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0616 00:53:20.522026 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0616 00:53:20.525883 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0616 00:53:20.526268 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0616 00:53:20.526413 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0616 00:53:20.526455 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0616 00:53:20.528465 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0616 00:53:20.647091 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0616 00:53:20.647437 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0616 00:53:20.650826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0616 00:53:20.654803 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0616 00:53:20.659641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0616 00:53:20.661513 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0616 00:53:20.664291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0616 00:53:20.666861 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0616 00:53:20.666941 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0616 00:53:20.666993 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0616 00:53:20.670415 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0616 00:53:20.672978 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0616 00:53:20.678031 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0616 00:53:20.683238 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0616 00:53:20.685007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0616 00:53:20.686720 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0616 00:53:20.686742 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0616 00:53:20.686752 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0616 00:53:20.686834 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0616 00:53:20.688600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0616 00:53:20.690351 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0616 00:53:20.692116 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0616 00:53:20.693842 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0616 00:53:20.695636 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0616 00:53:20.698217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0616 00:53:20.702931 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:53:20.704373 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:53:20.704469 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:53:20.704594 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:53:20.705061 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:53:20.705933 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:53:20.706020 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:53:20.706332 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:53:20.707461 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:53:20.797967 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:53:42.318406 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-16 00:53:42.318381612 +0000 UTC m=+21.833770184 I0616 00:53:43.153466 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-16 00:53:43.153449747 +0000 UTC m=+22.668838319 I0616 00:53:43.153558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 00:53:43.153622 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-16 00:53:43.15361454 +0000 UTC m=+22.669003122 E0616 00:53:43.377865 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 00:53:43.378010 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-16 00:53:43.377980654 +0000 UTC m=+22.893369226 E0616 00:53:43.378048 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 00:53:43.383034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:53:43.383160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 00:53:43.383196 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-16 00:53:43.38318587 +0000 UTC m=+22.898574452 E0616 00:53:43.877802 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0616 00:53:43.877877 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 00:53:43.877901 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 00:53:43.877931 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0616 00:53:44.381846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:53:44.382448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bbxjd" condition "Approved" to 2026-06-16 00:53:44.382403159 +0000 UTC m=+23.897791751 I0616 00:53:44.518267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bbxjd" condition "Ready" to 2026-06-16 00:53:44.518256272 +0000 UTC m=+24.033644834 I0616 00:53:44.583163 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:53:44.58314999 +0000 UTC m=+24.098538562 I0616 00:53:44.641805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:53:44.642091 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:53:44.642084516 +0000 UTC m=+24.157473068 I0616 00:53:44.645750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:53:44.668204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:53:44.668956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:53:44.669227 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:53:44.669219785 +0000 UTC m=+24.184608347 I0616 00:53:48.879023 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:53:48.879011964 +0000 UTC m=+28.394400516 I0616 00:54:15.569502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 00:54:15.569558 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-16 00:54:15.56954027 +0000 UTC m=+55.084928832 I0616 00:54:15.569724 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-16 00:54:15.569707784 +0000 UTC m=+55.085096326 I0616 00:54:15.587086 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-16 00:54:15.587075657 +0000 UTC m=+55.102464209 I0616 00:54:15.590964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:54:15.591017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 00:54:15.591064 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-16 00:54:15.591059298 +0000 UTC m=+55.106447850 I0616 00:54:15.801927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8wjxr" condition "Approved" to 2026-06-16 00:54:15.801913124 +0000 UTC m=+55.317301676 I0616 00:54:15.835337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8wjxr" condition "Ready" to 2026-06-16 00:54:15.835320871 +0000 UTC m=+55.350709423 I0616 00:54:15.871539 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:54:15.871521281 +0000 UTC m=+55.386909823 I0616 00:54:15.891379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:59:27.898748 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 00:59:27.898795 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Issuing" to 2026-06-16 00:59:27.898771065 +0000 UTC m=+367.414159617 I0616 00:59:27.898994 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready" to 2026-06-16 00:59:27.898982101 +0000 UTC m=+367.414370683 I0616 00:59:27.918407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:59:27.918476 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready" to 2026-06-16 00:59:27.918467333 +0000 UTC m=+367.433855915 I0616 00:59:28.154322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:59:28.189634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-wpmn4" condition "Approved" to 2026-06-16 00:59:28.189626315 +0000 UTC m=+367.705014867 I0616 00:59:28.241006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-wpmn4" condition "Ready" to 2026-06-16 00:59:28.240993193 +0000 UTC m=+367.756381765 I0616 00:59:28.277510 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:59:28.277498095 +0000 UTC m=+367.792886647 I0616 00:59:28.299796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:00:32.556512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:00:32.556544 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-16 01:00:32.55650857 +0000 UTC m=+432.071897112 I0616 01:00:32.556546 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-16 01:00:32.556537911 +0000 UTC m=+432.071926463 E0616 01:00:32.570114 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 01:00:32.570197 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-16 01:00:32.570187055 +0000 UTC m=+432.085575637 E0616 01:00:32.570230 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 01:00:32.573153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:00:32.573238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:00:32.573264 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-16 01:00:32.573256576 +0000 UTC m=+432.088645128 E0616 01:00:32.615395 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0616 01:00:32.615481 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 01:00:32.615509 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 01:00:32.615538 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0616 01:00:32.646999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:00:32.650032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n9n8b" condition "Approved" to 2026-06-16 01:00:32.6500209 +0000 UTC m=+432.165409452 I0616 01:00:32.661342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n9n8b" condition "Ready" to 2026-06-16 01:00:32.661335565 +0000 UTC m=+432.176724117 I0616 01:00:32.687527 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:00:32.687513199 +0000 UTC m=+432.202901751 I0616 01:00:32.707128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:00:32.707440 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:00:32.707432579 +0000 UTC m=+432.222821151 I0616 01:00:32.713973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:00:32.725172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:00:37.616232 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:00:37.616209895 +0000 UTC m=+437.131598467 I0616 01:01:23.713243 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-16 01:01:23.71320964 +0000 UTC m=+483.228598182 I0616 01:01:23.713522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:01:23.713701 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-16 01:01:23.713692846 +0000 UTC m=+483.229081398 I0616 01:01:23.731857 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-16 01:01:23.731843093 +0000 UTC m=+483.247231645 I0616 01:01:23.732176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:01:23.735548 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-16 01:01:23.735535178 +0000 UTC m=+483.250923740 I0616 01:01:23.734318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:01:23.734401 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-16 01:01:23.734396694 +0000 UTC m=+483.249785236 I0616 01:01:23.736041 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-16 01:01:23.736036694 +0000 UTC m=+483.251425226 I0616 01:01:23.753338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:23.753602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:01:23.753697 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-16 01:01:23.753689116 +0000 UTC m=+483.269077668 I0616 01:01:23.767289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:23.767492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:01:23.767582 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-16 01:01:23.767574243 +0000 UTC m=+483.282962815 I0616 01:01:23.767987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:23.768721 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:01:23.768804 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-16 01:01:23.768798548 +0000 UTC m=+483.284187110 I0616 01:01:23.901999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9ghmz" condition "Approved" to 2026-06-16 01:01:23.901990537 +0000 UTC m=+483.417379079 I0616 01:01:23.922150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9ghmz" condition "Ready" to 2026-06-16 01:01:23.922138148 +0000 UTC m=+483.437526700 I0616 01:01:23.948708 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:01:23.948694658 +0000 UTC m=+483.464083200 I0616 01:01:23.969197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:23.983219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jn9t8" condition "Approved" to 2026-06-16 01:01:23.983206052 +0000 UTC m=+483.498594584 I0616 01:01:24.011872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jn9t8" condition "Ready" to 2026-06-16 01:01:24.011860996 +0000 UTC m=+483.527249548 I0616 01:01:24.057167 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:01:24.057154293 +0000 UTC m=+483.572542825 I0616 01:01:24.076971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:24.077847 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:01:24.077833573 +0000 UTC m=+483.593222115 I0616 01:01:24.231029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:24.488552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xnh5w" condition "Approved" to 2026-06-16 01:01:24.48853849 +0000 UTC m=+484.003927042 I0616 01:01:24.538313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xnh5w" condition "Ready" to 2026-06-16 01:01:24.538302201 +0000 UTC m=+484.053690753 I0616 01:01:25.028519 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:01:25.028488639 +0000 UTC m=+484.543877221 I0616 01:01:25.129056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:25.129471 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:01:25.129461424 +0000 UTC m=+484.644849996 I0616 01:01:25.375155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:25.425600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:41.473923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:01:41.474156 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" condition "Issuing" to 2026-06-16 01:01:41.474138593 +0000 UTC m=+500.989527175 I0616 01:01:41.474205 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" condition "Ready" to 2026-06-16 01:01:41.47394751 +0000 UTC m=+500.989336072 I0616 01:01:41.500722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:41.500844 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:01:41.500874 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" condition "Issuing" to 2026-06-16 01:01:41.500865882 +0000 UTC m=+501.016254454 I0616 01:01:42.837411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-v8vhp-rmnz6" condition "Approved" to 2026-06-16 01:01:42.837402055 +0000 UTC m=+502.352790597 I0616 01:01:42.860121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-v8vhp-rmnz6" condition "Ready" to 2026-06-16 01:01:42.860111804 +0000 UTC m=+502.375500356 I0616 01:01:43.000225 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:01:43.000215397 +0000 UTC m=+502.515603939 I0616 01:01:43.511780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:43.512206 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:01:43.512199616 +0000 UTC m=+503.027588168 I0616 01:01:44.790910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:44.790853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:01:49.596827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v8vhp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:02:15.150510 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:02:15.150607 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-16 01:02:15.15054466 +0000 UTC m=+534.665933222 I0616 01:02:15.150672 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-16 01:02:15.150664212 +0000 UTC m=+534.666052774 I0616 01:02:15.166067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:02:15.166118 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:02:15.166136 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-16 01:02:15.166130383 +0000 UTC m=+534.681518925 I0616 01:02:15.340580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-t6jz9" condition "Approved" to 2026-06-16 01:02:15.340568948 +0000 UTC m=+534.855957490 I0616 01:02:15.359117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-t6jz9" condition "Ready" to 2026-06-16 01:02:15.359104806 +0000 UTC m=+534.874493348 I0616 01:02:15.414998 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:02:15.41498646 +0000 UTC m=+534.930375012 I0616 01:02:15.440119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:02:15.497729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:47.298116 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-16 01:05:47.298079565 +0000 UTC m=+746.813468107 I0616 01:05:47.298349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:05:47.298457 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-16 01:05:47.298446794 +0000 UTC m=+746.813835346 I0616 01:05:47.319955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:47.320047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:05:47.320085 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-16 01:05:47.320078465 +0000 UTC m=+746.835467017 I0616 01:05:47.451565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6d4mk" condition "Approved" to 2026-06-16 01:05:47.45155314 +0000 UTC m=+746.966941692 I0616 01:05:47.470863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6d4mk" condition "Ready" to 2026-06-16 01:05:47.47085363 +0000 UTC m=+746.986242172 I0616 01:05:47.514180 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:05:47.514166604 +0000 UTC m=+747.029555156 I0616 01:05:47.553798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:47.555925 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:05:47.555915413 +0000 UTC m=+747.071303975 I0616 01:05:47.575411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:06:48.636379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:06:48.636438 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-16 01:06:48.636409428 +0000 UTC m=+808.151798000 I0616 01:06:48.636622 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-16 01:06:48.636605892 +0000 UTC m=+808.151994444 I0616 01:06:48.654094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:06:48.654177 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-16 01:06:48.654167565 +0000 UTC m=+808.169556147 I0616 01:06:48.816089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:06:48.878963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wplh4" condition "Approved" to 2026-06-16 01:06:48.878950245 +0000 UTC m=+808.394338797 I0616 01:06:48.904582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wplh4" condition "Ready" to 2026-06-16 01:06:48.904565756 +0000 UTC m=+808.419954308 I0616 01:06:48.942117 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:06:48.942103116 +0000 UTC m=+808.457491668 I0616 01:06:48.970083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:06:48.970481 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:06:48.970471262 +0000 UTC m=+808.485859814 I0616 01:06:48.997654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"