I0622 22:59:11.476943 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0622 22:59:11.477284 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0622 22:59:11.480673 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0622 22:59:11.480698 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0622 22:59:11.480707 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0622 22:59:11.481173 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0622 22:59:11.481243 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0622 22:59:11.481290 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0622 22:59:11.483442 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0622 22:59:11.502345 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0622 22:59:11.506955 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0622 22:59:11.509541 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0622 22:59:11.512135 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0622 22:59:11.520678 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0622 22:59:11.525378 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0622 22:59:11.529231 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0622 22:59:11.531852 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0622 22:59:11.534333 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0622 22:59:11.534417 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0622 22:59:11.534382 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0622 22:59:11.537721 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0622 22:59:11.548061 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0622 22:59:11.551822 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0622 22:59:11.554651 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0622 22:59:11.556361 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0622 22:59:11.556388 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0622 22:59:11.556397 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0622 22:59:11.556404 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0622 22:59:11.556476 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0622 22:59:11.558361 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0622 22:59:11.564372 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0622 22:59:11.568369 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0622 22:59:11.574075 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0622 22:59:11.578301 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0622 22:59:11.581312 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:11.582125 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:11.583653 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:11.583744 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:11.584604 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:11.605603 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:11.620160 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:11.666038 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:11.687224 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:11.702246 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:11.718591 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0622 22:59:23.315506 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-22 22:59:23.315477709 +0000 UTC m=+11.871038478 I0622 22:59:24.031210 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 22:59:24.031407 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-22 22:59:24.031391601 +0000 UTC m=+12.586952390 I0622 22:59:24.031484 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-22 22:59:24.031463403 +0000 UTC m=+12.587024172 E0622 22:59:24.045980 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0622 22:59:24.046163 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-22 22:59:24.04607588 +0000 UTC m=+12.601636649 E0622 22:59:24.046202 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0622 22:59:24.046688 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 22:59:24.047067 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 22:59:24.047192 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-22 22:59:24.047107687 +0000 UTC m=+12.602668466 E0622 22:59:24.057004 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0622 22:59:24.057257 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 22:59:24.057313 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 22:59:24.057378 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0622 22:59:24.097199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-22 22:59:24.097182597 +0000 UTC m=+12.652743366 I0622 22:59:24.119811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-22 22:59:24.119796278 +0000 UTC m=+12.675357047 I0622 22:59:24.141988 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 22:59:24.141934331 +0000 UTC m=+12.697495091 I0622 22:59:24.219230 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 22:59:24.261160 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 22:59:29.057507 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 22:59:29.057479459 +0000 UTC m=+17.613040258 I0622 22:59:52.905283 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 22:59:52.905366 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-22 22:59:52.905356061 +0000 UTC m=+41.460916830 I0622 22:59:52.906104 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-22 22:59:52.906079611 +0000 UTC m=+41.461640410 I0622 22:59:52.913397 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-22 22:59:52.913367653 +0000 UTC m=+41.468928452 I0622 22:59:52.935224 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 22:59:52.935568 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 22:59:52.935623 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-22 22:59:52.935610286 +0000 UTC m=+41.491171055 I0622 22:59:53.323972 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 22:59:53.339979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-22 22:59:53.339952525 +0000 UTC m=+41.895513294 I0622 22:59:53.374533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-22 22:59:53.37451393 +0000 UTC m=+41.930074719 I0622 22:59:53.402506 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 22:59:53.402496936 +0000 UTC m=+41.958057705 I0622 22:59:53.418714 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:03:53.813867 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready" to 2026-06-22 23:03:53.813843317 +0000 UTC m=+282.369404106 I0622 23:03:53.814397 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-140.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:03:53.814433 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Issuing" to 2026-06-22 23:03:53.814429186 +0000 UTC m=+282.369989955 I0622 23:03:53.829952 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:03:53.830033 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready" to 2026-06-22 23:03:53.830018054 +0000 UTC m=+282.385578813 I0622 23:03:53.935309 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:03:53.963450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-140.nip.io-tls-1" condition "Approved" to 2026-06-22 23:03:53.963440603 +0000 UTC m=+282.519001362 I0622 23:03:53.976725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-140.nip.io-tls-1" condition "Ready" to 2026-06-22 23:03:53.976713715 +0000 UTC m=+282.532274504 I0622 23:03:53.995984 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:03:53.995970106 +0000 UTC m=+282.551530895 I0622 23:03:54.005263 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:03:54.005896 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:03:54.005889615 +0000 UTC m=+282.561450374 I0622 23:03:54.018776 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:03:54.019318 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:03:54.019313449 +0000 UTC m=+282.574874208 I0622 23:04:58.439618 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:04:58.439661 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-22 23:04:58.438981434 +0000 UTC m=+346.994542273 I0622 23:04:58.439732 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-22 23:04:58.439722144 +0000 UTC m=+346.995282913 I0622 23:04:58.452922 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:04:58.453289 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-22 23:04:58.453274333 +0000 UTC m=+347.008835132 E0622 23:04:58.453423 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0622 23:04:58.453533 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-22 23:04:58.453523809 +0000 UTC m=+347.009084578 E0622 23:04:58.453571 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 23:04:58.464984 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0622 23:04:58.465059 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 23:04:58.465090 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 23:04:58.465126 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0622 23:04:58.470939 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:04:58.491693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-22 23:04:58.491670889 +0000 UTC m=+347.047231658 I0622 23:04:58.509909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-22 23:04:58.509890938 +0000 UTC m=+347.065451707 I0622 23:04:58.532344 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:04:58.532331235 +0000 UTC m=+347.087892004 I0622 23:04:58.544416 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:04:58.544729 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:04:58.544717263 +0000 UTC m=+347.100278032 I0622 23:04:58.550404 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:04:58.563515 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:03.465725 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:05:03.465714847 +0000 UTC m=+352.021275616 I0622 23:05:46.091606 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:05:46.092811 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-22 23:05:46.092791939 +0000 UTC m=+394.648352738 I0622 23:05:46.094150 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-22 23:05:46.094135689 +0000 UTC m=+394.649696468 I0622 23:05:46.106291 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:05:46.106324 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-22 23:05:46.106316959 +0000 UTC m=+394.661877718 I0622 23:05:46.106590 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-22 23:05:46.106586495 +0000 UTC m=+394.662147254 I0622 23:05:46.106752 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-22 23:05:46.106737648 +0000 UTC m=+394.662298397 I0622 23:05:46.106784 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:05:46.114102 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-22 23:05:46.114082691 +0000 UTC m=+394.669643450 I0622 23:05:46.113112 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:46.114467 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:05:46.114840 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-22 23:05:46.114813887 +0000 UTC m=+394.670374656 I0622 23:05:46.129374 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:46.129532 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:05:46.129569 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-22 23:05:46.129561433 +0000 UTC m=+394.685122202 I0622 23:05:46.131483 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:46.132265 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-22 23:05:46.132255883 +0000 UTC m=+394.687816662 I0622 23:05:46.303300 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:46.311803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-22 23:05:46.31179368 +0000 UTC m=+394.867354439 I0622 23:05:46.323328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-22 23:05:46.323321976 +0000 UTC m=+394.878882735 I0622 23:05:46.345552 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:46.355487 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:05:46.355473447 +0000 UTC m=+394.911034216 I0622 23:05:46.364759 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:46.368928 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:46.375643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-22 23:05:46.375628164 +0000 UTC m=+394.931188943 I0622 23:05:46.379042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-22 23:05:46.37903272 +0000 UTC m=+394.934593489 I0622 23:05:46.389934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-22 23:05:46.389922 +0000 UTC m=+394.945482759 I0622 23:05:46.395196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-22 23:05:46.395181907 +0000 UTC m=+394.950742666 I0622 23:05:47.091260 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:05:47.091154508 +0000 UTC m=+395.646715297 I0622 23:05:47.188863 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:05:47.188849546 +0000 UTC m=+395.744410335 I0622 23:05:47.384044 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:47.384476 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:05:47.384470896 +0000 UTC m=+395.940031645 I0622 23:05:47.395714 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:47.484331 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:47.484808 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:05:47.484802822 +0000 UTC m=+396.040363581 I0622 23:05:47.834739 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:47.934945 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:47.985055 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:54.321758 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kklh7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:05:54.321802 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kklh7-tls" condition "Issuing" to 2026-06-22 23:05:54.321791306 +0000 UTC m=+402.877352105 I0622 23:05:54.325686 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kklh7-tls" condition "Ready" to 2026-06-22 23:05:54.322007961 +0000 UTC m=+402.877568740 I0622 23:05:54.339279 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kklh7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kklh7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:54.339348 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kklh7-tls" condition "Ready" to 2026-06-22 23:05:54.339342396 +0000 UTC m=+402.894903145 I0622 23:05:54.463993 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kklh7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kklh7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:54.490728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kklh7-tls-1" condition "Approved" to 2026-06-22 23:05:54.490712907 +0000 UTC m=+403.046273676 I0622 23:05:54.507781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kklh7-tls-1" condition "Ready" to 2026-06-22 23:05:54.507770847 +0000 UTC m=+403.063331606 I0622 23:05:54.527635 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kklh7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:05:54.527621237 +0000 UTC m=+403.083182006 I0622 23:05:54.545352 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kklh7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kklh7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:05:54.546315 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kklh7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:05:54.546306613 +0000 UTC m=+403.101867362 I0622 23:05:54.566315 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kklh7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kklh7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:06:06.577716 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-22 23:06:06.577696022 +0000 UTC m=+415.133256791 I0622 23:06:06.578013 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:06:06.578034 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-22 23:06:06.578030519 +0000 UTC m=+415.133591278 I0622 23:06:06.593598 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:06:06.593911 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-22 23:06:06.593902493 +0000 UTC m=+415.149463252 I0622 23:06:06.720236 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:06:06.755261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-22 23:06:06.755246603 +0000 UTC m=+415.310807372 I0622 23:06:06.772203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-22 23:06:06.772193459 +0000 UTC m=+415.327754228 I0622 23:06:06.801853 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:06:06.801838483 +0000 UTC m=+415.357399272 I0622 23:06:06.815004 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:06:06.815492 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:06:06.81548659 +0000 UTC m=+415.371047349 I0622 23:06:06.830463 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:06:06.835961 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:09:23.664611 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-22 23:09:23.664594179 +0000 UTC m=+612.220154948 I0622 23:09:23.666176 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:09:23.666206 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-22 23:09:23.666200964 +0000 UTC m=+612.221761743 I0622 23:09:23.674698 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:09:23.674813 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:09:23.674875 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-22 23:09:23.674869411 +0000 UTC m=+612.230430180 I0622 23:09:23.832855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-22 23:09:23.832846613 +0000 UTC m=+612.388407372 I0622 23:09:23.844364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-22 23:09:23.844352515 +0000 UTC m=+612.399913304 I0622 23:09:23.860035 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:09:23.860025143 +0000 UTC m=+612.415585912 I0622 23:09:23.875522 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:10:06.018125 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 23:10:06.018158 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-22 23:10:06.018150242 +0000 UTC m=+654.573711011 I0622 23:10:06.018162 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-22 23:10:06.018146372 +0000 UTC m=+654.573707141 I0622 23:10:06.032564 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:10:06.032664 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-22 23:10:06.032653825 +0000 UTC m=+654.588214624 I0622 23:10:06.235052 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:10:06.272127 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-22 23:10:06.272111534 +0000 UTC m=+654.827672303 I0622 23:10:06.286238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-22 23:10:06.286228551 +0000 UTC m=+654.841789320 I0622 23:10:06.309915 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:10:06.309903105 +0000 UTC m=+654.865463874 I0622 23:10:06.325158 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0622 23:10:06.325695 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 23:10:06.325687608 +0000 UTC m=+654.881248367 I0622 23:10:06.344927 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"