I0615 15:43:12.649560 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0615 15:43:12.649666 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0615 15:43:12.649735 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0615 15:43:12.654992 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0615 15:43:12.655372 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0615 15:43:12.655500 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0615 15:43:12.655513 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0615 15:43:12.658704 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0615 15:43:12.674881 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0615 15:43:12.678778 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0615 15:43:12.682124 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0615 15:43:12.682201 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0615 15:43:12.682324 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0615 15:43:12.687495 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0615 15:43:12.690325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0615 15:43:12.692785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0615 15:43:12.695226 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0615 15:43:12.696915 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0615 15:43:12.696936 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0615 15:43:12.697066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0615 15:43:12.698750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0615 15:43:12.700376 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0615 15:43:12.700515 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0615 15:43:12.705022 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0615 15:43:12.708011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0615 15:43:12.710882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0615 15:43:12.713690 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0615 15:43:12.715665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0615 15:43:12.717975 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0615 15:43:12.720628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0615 15:43:12.721805 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0615 15:43:12.721977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0615 15:43:12.724543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0615 15:43:12.726387 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 15:43:12.730146 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 15:43:12.731447 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 15:43:12.745843 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 15:43:12.761355 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 15:43:12.774052 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 15:43:12.787764 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 15:43:12.804782 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 15:43:12.814708 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 15:43:12.820244 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 15:43:26.662460 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-15 15:43:26.66244195 +0000 UTC m=+14.046737145 I0615 15:43:27.383383 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-15 15:43:27.383369038 +0000 UTC m=+14.767664193 I0615 15:43:27.383560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:43:27.383745 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 15:43:27.383726189 +0000 UTC m=+14.768021354 E0615 15:43:27.403434 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 15:43:27.403575 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-15 15:43:27.403565381 +0000 UTC m=+14.787860566 E0615 15:43:27.403642 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 15:43:27.405426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:43:27.405536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:43:27.405565 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 15:43:27.405556084 +0000 UTC m=+14.789851249 E0615 15:43:27.412664 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0615 15:43:27.412852 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 15:43:27.412897 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 15:43:27.412942 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0615 15:43:27.447099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:43:27.451123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-crzmd" condition "Approved" to 2026-06-15 15:43:27.451114815 +0000 UTC m=+14.835409970 I0615 15:43:27.463652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-crzmd" condition "Ready" to 2026-06-15 15:43:27.463640524 +0000 UTC m=+14.847935679 I0615 15:43:27.485585 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:43:27.485572713 +0000 UTC m=+14.869867858 I0615 15:43:27.502261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:43:27.502706 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:43:27.502695298 +0000 UTC m=+14.886990483 I0615 15:43:27.529227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:43:27.529598 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:43:27.529568643 +0000 UTC m=+14.913863788 I0615 15:43:27.531304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:43:32.413986 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:43:32.413968798 +0000 UTC m=+19.798263983 I0615 15:43:54.705344 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-15 15:43:54.705292914 +0000 UTC m=+42.089588079 I0615 15:43:54.706110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:43:54.706140 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 15:43:54.706134405 +0000 UTC m=+42.090429570 I0615 15:43:54.728411 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-15 15:43:54.728401529 +0000 UTC m=+42.112696684 I0615 15:43:54.736577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:43:54.736649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:43:54.736720 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 15:43:54.736713793 +0000 UTC m=+42.121008958 I0615 15:43:54.985144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cx95c" condition "Approved" to 2026-06-15 15:43:54.985131479 +0000 UTC m=+42.369426654 I0615 15:43:55.009375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cx95c" condition "Ready" to 2026-06-15 15:43:55.009364485 +0000 UTC m=+42.393659640 I0615 15:43:55.043918 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:43:55.043907392 +0000 UTC m=+42.428202547 I0615 15:43:55.075725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:43:55.076121 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:43:55.076111103 +0000 UTC m=+42.460406268 I0615 15:43:55.079725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:43:55.093756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:48:07.168205 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready" to 2026-06-15 15:48:07.168180504 +0000 UTC m=+294.552475669 I0615 15:48:07.168877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:48:07.168901 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-06-15 15:48:07.168896727 +0000 UTC m=+294.553191882 I0615 15:48:07.186385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:48:07.186446 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready" to 2026-06-15 15:48:07.186441349 +0000 UTC m=+294.570736494 I0615 15:48:07.552182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:48:07.585764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-l6kgr" condition "Approved" to 2026-06-15 15:48:07.585752424 +0000 UTC m=+294.970047579 I0615 15:48:07.620180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-l6kgr" condition "Ready" to 2026-06-15 15:48:07.620158576 +0000 UTC m=+295.004453761 I0615 15:48:07.651943 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:48:07.651927862 +0000 UTC m=+295.036223007 I0615 15:48:07.673687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:48:07.722269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:49:25.748434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:49:25.748497 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-15 15:49:25.748463428 +0000 UTC m=+373.132758583 I0615 15:49:25.748432 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 15:49:25.748398126 +0000 UTC m=+373.132693311 E0615 15:49:25.765622 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 15:49:25.765678 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-15 15:49:25.765668715 +0000 UTC m=+373.149963870 E0615 15:49:25.765739 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 15:49:25.768709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:49:25.768786 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 15:49:25.76877826 +0000 UTC m=+373.153073425 E0615 15:49:25.776867 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0615 15:49:25.777023 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 15:49:25.777093 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 15:49:25.777165 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0615 15:49:25.785890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:49:25.785989 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 15:49:25.785977397 +0000 UTC m=+373.170272562 I0615 15:49:25.786421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:49:25.801882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hmbd5" condition "Approved" to 2026-06-15 15:49:25.801868068 +0000 UTC m=+373.186163223 I0615 15:49:25.813653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hmbd5" condition "Ready" to 2026-06-15 15:49:25.813641529 +0000 UTC m=+373.197936684 I0615 15:49:25.833919 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:49:25.833903959 +0000 UTC m=+373.218199114 I0615 15:49:25.851252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:49:30.777521 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:49:30.777498471 +0000 UTC m=+378.161793656 I0615 15:50:12.881798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:50:12.884262 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-15 15:50:12.884244161 +0000 UTC m=+420.268539326 I0615 15:50:12.882296 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-15 15:50:12.882281201 +0000 UTC m=+420.266576356 I0615 15:50:12.882326 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-15 15:50:12.882323512 +0000 UTC m=+420.266618667 I0615 15:50:12.882458 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:50:12.889043 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-15 15:50:12.888993257 +0000 UTC m=+420.273288392 I0615 15:50:12.898139 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-15 15:50:12.898128886 +0000 UTC m=+420.282424031 I0615 15:50:12.899338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:50:12.899356 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-15 15:50:12.899353773 +0000 UTC m=+420.283648918 I0615 15:50:13.040516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:13.040573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:50:13.040628 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-15 15:50:13.040588867 +0000 UTC m=+420.424884012 I0615 15:50:13.040733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:13.040799 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:50:13.040823 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-15 15:50:13.040817664 +0000 UTC m=+420.425112809 I0615 15:50:13.041377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:13.047365 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-15 15:50:13.047359485 +0000 UTC m=+420.431654640 I0615 15:50:13.214965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:13.245922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kq8rh" condition "Approved" to 2026-06-15 15:50:13.245914991 +0000 UTC m=+420.630210126 I0615 15:50:13.265351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kq8rh" condition "Ready" to 2026-06-15 15:50:13.265344077 +0000 UTC m=+420.649639222 I0615 15:50:13.298033 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:50:13.29802389 +0000 UTC m=+420.682319035 I0615 15:50:13.320153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vbmqq" condition "Approved" to 2026-06-15 15:50:13.320145078 +0000 UTC m=+420.704440213 I0615 15:50:13.331397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:13.331688 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:50:13.331681251 +0000 UTC m=+420.715976406 I0615 15:50:13.345666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vbmqq" condition "Ready" to 2026-06-15 15:50:13.34565576 +0000 UTC m=+420.729950905 I0615 15:50:13.356961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:13.381699 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:50:13.381689174 +0000 UTC m=+420.765984319 I0615 15:50:13.405909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:13.406161 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:50:13.406154835 +0000 UTC m=+420.790449980 I0615 15:50:13.561053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:13.977953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-c522t" condition "Approved" to 2026-06-15 15:50:13.977932623 +0000 UTC m=+421.362227798 I0615 15:50:14.026387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-c522t" condition "Ready" to 2026-06-15 15:50:14.02637716 +0000 UTC m=+421.410672315 I0615 15:50:14.369000 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:50:14.368989884 +0000 UTC m=+421.753285039 I0615 15:50:14.463037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:20.967374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:50:20.967428 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls" condition "Issuing" to 2026-06-15 15:50:20.96742104 +0000 UTC m=+428.351716195 I0615 15:50:20.967668 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls" condition "Ready" to 2026-06-15 15:50:20.967619236 +0000 UTC m=+428.351914391 I0615 15:50:20.983119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:20.983197 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls" condition "Ready" to 2026-06-15 15:50:20.983191311 +0000 UTC m=+428.367486456 I0615 15:50:21.073848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:21.104272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gsvhn-c6574" condition "Approved" to 2026-06-15 15:50:21.104259117 +0000 UTC m=+428.488554292 I0615 15:50:21.122541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gsvhn-c6574" condition "Ready" to 2026-06-15 15:50:21.122531406 +0000 UTC m=+428.506826561 I0615 15:50:21.156846 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:50:21.156829803 +0000 UTC m=+428.541124988 I0615 15:50:21.174735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:21.214437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gsvhn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:37.669105 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-15 15:50:37.669078644 +0000 UTC m=+445.053373819 I0615 15:50:37.672047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:50:37.672105 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-15 15:50:37.67209334 +0000 UTC m=+445.056388495 I0615 15:50:37.698314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:37.698450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:50:37.698487 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-15 15:50:37.698467863 +0000 UTC m=+445.082763018 I0615 15:50:37.951565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:37.959416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bfnxz" condition "Approved" to 2026-06-15 15:50:37.959404064 +0000 UTC m=+445.343699219 I0615 15:50:38.030032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bfnxz" condition "Ready" to 2026-06-15 15:50:38.030020773 +0000 UTC m=+445.414315908 I0615 15:50:38.092887 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:50:38.092869174 +0000 UTC m=+445.477164359 I0615 15:50:38.181754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:50:38.226080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:54:00.472998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:54:00.473041 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-15 15:54:00.473031278 +0000 UTC m=+647.857326463 I0615 15:54:00.473404 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-15 15:54:00.473395151 +0000 UTC m=+647.857690336 I0615 15:54:00.490002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:54:00.490356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:54:00.490503 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-15 15:54:00.490379839 +0000 UTC m=+647.874675014 I0615 15:54:00.794439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:54:00.803002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zzc4w" condition "Approved" to 2026-06-15 15:54:00.802988265 +0000 UTC m=+648.187283420 I0615 15:54:00.823105 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zzc4w" condition "Ready" to 2026-06-15 15:54:00.82309704 +0000 UTC m=+648.207392185 I0615 15:54:00.845096 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:54:00.845088553 +0000 UTC m=+648.229383698 I0615 15:54:00.866983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:54:00.867390 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:54:00.867383198 +0000 UTC m=+648.251678353 I0615 15:54:00.876637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:54:00.886039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:54:00.886411 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:54:00.886402442 +0000 UTC m=+648.270697597 I0615 15:54:43.789833 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-15 15:54:43.789822161 +0000 UTC m=+691.174117316 I0615 15:54:43.790127 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:54:43.790180 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 15:54:43.79017555 +0000 UTC m=+691.174470705 I0615 15:54:43.810553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:54:43.810618 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 15:54:43.810636 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 15:54:43.810628481 +0000 UTC m=+691.194923656 I0615 15:54:44.175166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 15:54:44.182327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-86smw" condition "Approved" to 2026-06-15 15:54:44.182315788 +0000 UTC m=+691.566610943 I0615 15:54:44.203096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-86smw" condition "Ready" to 2026-06-15 15:54:44.203085091 +0000 UTC m=+691.587380246 I0615 15:54:44.236217 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 15:54:44.236206376 +0000 UTC m=+691.620501511 I0615 15:54:44.256580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"