I0629 20:52:08.032121 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0629 20:52:08.032283 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0629 20:52:08.037296 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0629 20:52:08.037322 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0629 20:52:08.037331 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0629 20:52:08.037984 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0629 20:52:08.038015 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0629 20:52:08.038216 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0629 20:52:08.040769 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0629 20:52:08.055054 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0629 20:52:08.062272 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0629 20:52:08.067916 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0629 20:52:08.070143 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0629 20:52:08.070169 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0629 20:52:08.070177 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0629 20:52:08.070293 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0629 20:52:08.072937 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0629 20:52:08.072953 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0629 20:52:08.073077 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0629 20:52:08.075567 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0629 20:52:08.082369 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0629 20:52:08.084138 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0629 20:52:08.087377 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0629 20:52:08.089969 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0629 20:52:08.093236 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0629 20:52:08.095647 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0629 20:52:08.097876 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0629 20:52:08.100006 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0629 20:52:08.103350 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0629 20:52:08.109287 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0629 20:52:08.111878 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0629 20:52:08.114296 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0629 20:52:08.116538 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0629 20:52:08.116717 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0629 20:52:08.119688 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:08.121259 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:08.122278 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:08.123327 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:08.123567 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:08.124042 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:08.140316 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:08.159571 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:08.181766 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:08.204108 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:08.222148 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 20:52:20.235674 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-29 20:52:20.235644618 +0000 UTC m=+12.231374689 I0629 20:52:20.913526 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 20:52:20.913567 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-29 20:52:20.913558508 +0000 UTC m=+12.909288549 I0629 20:52:20.913635 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-29 20:52:20.913617679 +0000 UTC m=+12.909347750 I0629 20:52:20.926191 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:52:20.926301 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-29 20:52:20.926286974 +0000 UTC m=+12.922017045 E0629 20:52:20.927282 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0629 20:52:20.927350 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-29 20:52:20.927342192 +0000 UTC m=+12.923072223 E0629 20:52:20.927487 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0629 20:52:20.943003 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0629 20:52:20.943203 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0629 20:52:20.943417 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0629 20:52:20.943509 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0629 20:52:20.943571 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0629 20:52:20.977162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-29 20:52:20.977146862 +0000 UTC m=+12.972876903 I0629 20:52:21.003355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-29 20:52:21.003337275 +0000 UTC m=+12.999067376 I0629 20:52:21.029231 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 20:52:21.029218369 +0000 UTC m=+13.024948410 I0629 20:52:21.049530 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:52:21.050065 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 20:52:21.050051396 +0000 UTC m=+13.045781457 I0629 20:52:21.056172 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:52:21.066309 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:52:25.944169 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 20:52:25.944144959 +0000 UTC m=+17.939875030 I0629 20:52:54.689004 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 20:52:54.689205 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-29 20:52:54.68918874 +0000 UTC m=+46.684918781 I0629 20:52:54.689194 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-29 20:52:54.689065348 +0000 UTC m=+46.684795389 I0629 20:52:54.699738 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-29 20:52:54.699725984 +0000 UTC m=+46.695456025 I0629 20:52:54.706067 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:52:54.706454 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 20:52:54.706614 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-29 20:52:54.706573193 +0000 UTC m=+46.702303264 I0629 20:52:54.897516 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:52:54.912272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-29 20:52:54.912259297 +0000 UTC m=+46.907989338 I0629 20:52:54.935611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-29 20:52:54.935600607 +0000 UTC m=+46.931330648 I0629 20:52:54.970462 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 20:52:54.970449647 +0000 UTC m=+46.966179718 I0629 20:52:54.986155 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:52:54.986909 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 20:52:54.986900246 +0000 UTC m=+46.982630287 I0629 20:52:55.000340 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:58:32.228541 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 20:58:32.228613 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-246.nip.io-tls" condition "Issuing" to 2026-06-29 20:58:32.228602283 +0000 UTC m=+384.224332324 I0629 20:58:32.234205 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-246.nip.io-tls" condition "Ready" to 2026-06-29 20:58:32.228198876 +0000 UTC m=+384.223928987 I0629 20:58:32.288401 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:58:32.288472 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-246.nip.io-tls" condition "Ready" to 2026-06-29 20:58:32.288462347 +0000 UTC m=+384.284192388 I0629 20:58:32.545044 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:58:32.592799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-246.nip.io-tls-1" condition "Approved" to 2026-06-29 20:58:32.592785728 +0000 UTC m=+384.588515769 I0629 20:58:32.617892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-246.nip.io-tls-1" condition "Ready" to 2026-06-29 20:58:32.617871275 +0000 UTC m=+384.613601346 I0629 20:58:32.692734 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 20:58:32.692712419 +0000 UTC m=+384.688442480 I0629 20:58:32.730625 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:59:39.826374 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 20:59:39.826413 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-29 20:59:39.826360775 +0000 UTC m=+451.822090846 I0629 20:59:39.826415 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-29 20:59:39.826407305 +0000 UTC m=+451.822137366 E0629 20:59:39.838810 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0629 20:59:39.838905 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-29 20:59:39.83889937 +0000 UTC m=+451.834629411 E0629 20:59:39.838969 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0629 20:59:39.839485 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:59:39.839795 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-29 20:59:39.839782724 +0000 UTC m=+451.835512845 E0629 20:59:39.852859 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0629 20:59:39.852933 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0629 20:59:39.852956 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0629 20:59:39.853063 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0629 20:59:39.862610 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:59:39.886835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-29 20:59:39.886817779 +0000 UTC m=+451.882547840 I0629 20:59:39.900428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-29 20:59:39.900419112 +0000 UTC m=+451.896149153 I0629 20:59:39.927506 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 20:59:39.927496926 +0000 UTC m=+451.923226967 I0629 20:59:39.945592 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:59:39.946086 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 20:59:39.946076506 +0000 UTC m=+451.941806557 I0629 20:59:39.964770 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 20:59:44.853547 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 20:59:44.853528483 +0000 UTC m=+456.849258554 I0629 21:00:29.911279 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 21:00:29.911597 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-29 21:00:29.911063828 +0000 UTC m=+501.906793849 I0629 21:00:29.911601 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-29 21:00:29.911332582 +0000 UTC m=+501.907062653 I0629 21:00:29.916169 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 21:00:29.916211 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-29 21:00:29.916201944 +0000 UTC m=+501.911931975 I0629 21:00:29.916211 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-29 21:00:29.916201544 +0000 UTC m=+501.911931575 I0629 21:00:29.924470 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-29 21:00:29.924453397 +0000 UTC m=+501.920183438 I0629 21:00:29.935221 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 21:00:29.936044 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-29 21:00:29.936029338 +0000 UTC m=+501.931759389 I0629 21:00:29.957581 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:29.957696 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-29 21:00:29.957685879 +0000 UTC m=+501.953415930 I0629 21:00:29.958204 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:29.958284 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-29 21:00:29.958272427 +0000 UTC m=+501.954002478 I0629 21:00:29.958375 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:29.958563 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 21:00:29.958595 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-29 21:00:29.958589272 +0000 UTC m=+501.954319313 I0629 21:00:30.480499 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:30.509942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-29 21:00:30.509898453 +0000 UTC m=+502.505628484 I0629 21:00:30.527905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-29 21:00:30.5278866 +0000 UTC m=+502.523616631 I0629 21:00:30.531918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-29 21:00:30.531905189 +0000 UTC m=+502.527635220 I0629 21:00:30.548260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-29 21:00:30.5482459 +0000 UTC m=+502.543975921 I0629 21:00:30.569524 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:00:30.569507244 +0000 UTC m=+502.565237275 I0629 21:00:30.588158 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:00:30.58813608 +0000 UTC m=+502.583866111 I0629 21:00:30.588578 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:30.610375 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:30.611061 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:00:30.611053788 +0000 UTC m=+502.606783809 I0629 21:00:30.630634 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:30.735561 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:30.805580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-29 21:00:30.805571365 +0000 UTC m=+502.801301396 I0629 21:00:30.852755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-29 21:00:30.852740942 +0000 UTC m=+502.848470983 I0629 21:00:31.396275 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:00:31.396242252 +0000 UTC m=+503.391972293 I0629 21:00:31.460500 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:31.461484 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:00:31.461471025 +0000 UTC m=+503.457201066 I0629 21:00:31.644704 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:41.033081 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 21:00:41.033126 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls" condition "Issuing" to 2026-06-29 21:00:41.033112679 +0000 UTC m=+513.028842720 I0629 21:00:41.033405 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls" condition "Ready" to 2026-06-29 21:00:41.033395743 +0000 UTC m=+513.029125784 I0629 21:00:41.049156 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:41.049302 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls" condition "Ready" to 2026-06-29 21:00:41.049291075 +0000 UTC m=+513.045021116 I0629 21:00:41.193580 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:41.221958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls-1" condition "Approved" to 2026-06-29 21:00:41.221945883 +0000 UTC m=+513.217675914 I0629 21:00:41.236164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls-1" condition "Ready" to 2026-06-29 21:00:41.236155191 +0000 UTC m=+513.231885222 I0629 21:00:41.261940 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:00:41.261925418 +0000 UTC m=+513.257655449 I0629 21:00:41.281036 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:00:41.282577 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:00:41.282566921 +0000 UTC m=+513.278296962 I0629 21:00:41.317123 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bj8dc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:01:07.011474 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-29 21:01:07.011412672 +0000 UTC m=+539.007142733 I0629 21:01:07.012000 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 21:01:07.012066 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-29 21:01:07.012052191 +0000 UTC m=+539.007782262 I0629 21:01:07.053634 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:01:07.053784 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 21:01:07.053822 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-29 21:01:07.05381169 +0000 UTC m=+539.049541751 I0629 21:01:07.406158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-29 21:01:07.406148946 +0000 UTC m=+539.401878977 I0629 21:01:07.439596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-29 21:01:07.439581325 +0000 UTC m=+539.435311366 I0629 21:01:07.605603 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:01:07.605584367 +0000 UTC m=+539.601314428 I0629 21:01:07.663206 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:01:07.663814 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:01:07.663807023 +0000 UTC m=+539.659537064 I0629 21:01:07.669729 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:01:07.695310 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:01:07.696479 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:01:07.696464561 +0000 UTC m=+539.692194632 I0629 21:04:43.367416 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-29 21:04:43.367403072 +0000 UTC m=+755.363133113 I0629 21:04:43.367599 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 21:04:43.367655 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-29 21:04:43.36764861 +0000 UTC m=+755.363378681 I0629 21:04:43.377934 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:04:43.378078 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 21:04:43.378108 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-29 21:04:43.378099676 +0000 UTC m=+755.373829747 I0629 21:04:43.730793 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:04:43.757441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-29 21:04:43.757428605 +0000 UTC m=+755.753158646 I0629 21:04:43.778124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-29 21:04:43.778114091 +0000 UTC m=+755.773844132 I0629 21:04:43.806073 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:04:43.806063529 +0000 UTC m=+755.801793570 I0629 21:04:43.818576 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:04:43.861650 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:05:32.100490 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-29 21:05:32.100474455 +0000 UTC m=+804.096204516 I0629 21:05:32.101324 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 21:05:32.101380 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-29 21:05:32.10137389 +0000 UTC m=+804.097103931 I0629 21:05:32.118516 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:05:32.118624 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-29 21:05:32.118615968 +0000 UTC m=+804.114346009 I0629 21:05:32.497997 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 21:05:32.538461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-29 21:05:32.538450486 +0000 UTC m=+804.534180527 I0629 21:05:32.559700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-29 21:05:32.559690204 +0000 UTC m=+804.555420235 I0629 21:05:32.620908 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 21:05:32.620853649 +0000 UTC m=+804.616583690 I0629 21:05:32.640456 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"