I0604 11:53:56.445929 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0604 11:53:56.446066 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0604 11:53:56.446160 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0604 11:53:56.453623 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0604 11:53:56.454051 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0604 11:53:56.454161 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0604 11:53:56.454316 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0604 11:53:56.456763 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0604 11:53:56.475497 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0604 11:53:56.475793 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0604 11:53:56.480860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0604 11:53:56.483674 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0604 11:53:56.488109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0604 11:53:56.491639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0604 11:53:56.494670 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0604 11:53:56.497358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0604 11:53:56.499734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0604 11:53:56.501877 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0604 11:53:56.501926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0604 11:53:56.501931 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0604 11:53:56.514037 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0604 11:53:56.519859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0604 11:53:56.522468 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0604 11:53:56.522585 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0604 11:53:56.524620 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0604 11:53:56.524647 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0604 11:53:56.524698 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0604 11:53:56.526963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0604 11:53:56.529134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0604 11:53:56.530983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0604 11:53:56.537884 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0604 11:53:56.539886 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0604 11:53:56.542005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0604 11:53:56.554054 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 11:53:56.559478 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 11:53:56.559643 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 11:53:56.560672 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 11:53:56.581692 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 11:53:56.595143 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 11:53:56.611080 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 11:53:56.625146 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 11:53:56.642366 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 11:53:56.658660 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0604 11:54:14.978517 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-04 11:54:14.978501625 +0000 UTC m=+18.571696663 I0604 11:54:15.700614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 11:54:15.709680 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-04 11:54:15.709660156 +0000 UTC m=+19.302855174 I0604 11:54:15.704557 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-04 11:54:15.704544947 +0000 UTC m=+19.297739955 E0604 11:54:15.741021 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0604 11:54:15.741087 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-04 11:54:15.74108202 +0000 UTC m=+19.334277028 E0604 11:54:15.741105 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0604 11:54:15.757413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 11:54:15.757505 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-04 11:54:15.757495331 +0000 UTC m=+19.350690359 E0604 11:54:15.757927 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0604 11:54:15.758087 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0604 11:54:15.758191 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0604 11:54:15.758276 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0604 11:54:15.797804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6jv25" condition "Approved" to 2026-06-04 11:54:15.797795251 +0000 UTC m=+19.390990279 I0604 11:54:15.800831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 11:54:15.800918 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-04 11:54:15.800910454 +0000 UTC m=+19.394105472 I0604 11:54:15.819827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6jv25" condition "Ready" to 2026-06-04 11:54:15.819813185 +0000 UTC m=+19.413008223 I0604 11:54:15.848241 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 11:54:15.848228978 +0000 UTC m=+19.441424026 I0604 11:54:15.870938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 11:54:15.871403 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 11:54:15.871369456 +0000 UTC m=+19.464564474 I0604 11:54:15.903010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 11:54:20.759114 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 11:54:20.759080727 +0000 UTC m=+24.352275775 I0604 11:54:44.571643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 11:54:44.571698 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-04 11:54:44.571690843 +0000 UTC m=+48.164885861 I0604 11:54:44.571771 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-04 11:54:44.571758374 +0000 UTC m=+48.164953392 I0604 11:54:44.592853 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-04 11:54:44.592840152 +0000 UTC m=+48.186035170 I0604 11:54:44.593741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0604 11:54:44.593816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 11:54:44.593851 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-04 11:54:44.59384445 +0000 UTC m=+48.187039498 I0604 11:54:44.850195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zmfmg" condition "Approved" to 2026-06-04 11:54:44.850185291 +0000 UTC m=+48.443380309 I0604 11:54:44.884483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zmfmg" condition "Ready" to 2026-06-04 11:54:44.884472451 +0000 UTC m=+48.477667459 I0604 11:54:44.921460 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 11:54:44.92144872 +0000 UTC m=+48.514643718 I0604 11:54:44.938042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0604 11:54:44.938249 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 11:54:44.938244159 +0000 UTC m=+48.531439167 I0604 11:54:44.968060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0604 11:59:34.548428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 11:59:34.548539 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-06-04 11:59:34.548469171 +0000 UTC m=+338.141664209 I0604 11:59:34.549481 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-06-04 11:59:34.549470202 +0000 UTC m=+338.142665250 I0604 11:59:34.565463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 11:59:34.565521 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-06-04 11:59:34.565514136 +0000 UTC m=+338.158709144 I0604 11:59:34.843934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 11:59:34.879240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-5mk5r" condition "Approved" to 2026-06-04 11:59:34.877004794 +0000 UTC m=+338.470199812 I0604 11:59:34.919368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-5mk5r" condition "Ready" to 2026-06-04 11:59:34.919351196 +0000 UTC m=+338.512546214 I0604 11:59:34.982414 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 11:59:34.98239979 +0000 UTC m=+338.575594798 I0604 11:59:35.001831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 11:59:35.002917 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 11:59:35.002907717 +0000 UTC m=+338.596102745 I0604 11:59:35.023183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:00:39.087382 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 12:00:39.087420 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-04 12:00:39.087366885 +0000 UTC m=+402.680561923 I0604 12:00:39.087420 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-04 12:00:39.087412096 +0000 UTC m=+402.680607144 I0604 12:00:39.137613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:00:39.137695 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-04 12:00:39.137687418 +0000 UTC m=+402.730882426 E0604 12:00:39.264420 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0604 12:00:39.264574 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-04 12:00:39.264539895 +0000 UTC m=+402.857734943 E0604 12:00:39.264615 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0604 12:00:39.325475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0604 12:00:39.326452 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0604 12:00:39.329100 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0604 12:00:39.329160 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0604 12:00:39.330462 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0604 12:00:39.407395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8fs6m" condition "Approved" to 2026-06-04 12:00:39.407381301 +0000 UTC m=+403.000576319 I0604 12:00:39.432090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8fs6m" condition "Ready" to 2026-06-04 12:00:39.432076303 +0000 UTC m=+403.025271321 I0604 12:00:39.689615 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:00:39.689551071 +0000 UTC m=+403.282746109 I0604 12:00:39.804357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:00:44.326914 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:00:44.32690058 +0000 UTC m=+407.920095618 I0604 12:01:25.320835 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-04 12:01:25.320824956 +0000 UTC m=+448.914019964 I0604 12:01:25.321308 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 12:01:25.321363 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-04 12:01:25.321358015 +0000 UTC m=+448.914553023 I0604 12:01:25.325040 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-04 12:01:25.325021124 +0000 UTC m=+448.918216142 I0604 12:01:25.325505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 12:01:25.325533 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-04 12:01:25.325529082 +0000 UTC m=+448.918724100 I0604 12:01:25.327174 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-04 12:01:25.327167829 +0000 UTC m=+448.920362847 I0604 12:01:25.327539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 12:01:25.327568 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-04 12:01:25.327563405 +0000 UTC m=+448.920758423 I0604 12:01:25.371397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:25.371682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 12:01:25.371722 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-04 12:01:25.371713944 +0000 UTC m=+448.964908952 I0604 12:01:25.385257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:25.385353 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 12:01:25.385538 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-04 12:01:25.385528624 +0000 UTC m=+448.978723642 I0604 12:01:25.402099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:25.402250 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-04 12:01:25.402237892 +0000 UTC m=+448.995432920 I0604 12:01:25.685727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kcx22" condition "Approved" to 2026-06-04 12:01:25.685711783 +0000 UTC m=+449.278906831 I0604 12:01:25.738570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kcx22" condition "Ready" to 2026-06-04 12:01:25.73856122 +0000 UTC m=+449.331756228 I0604 12:01:25.773523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v58q7" condition "Approved" to 2026-06-04 12:01:25.773511222 +0000 UTC m=+449.366706250 I0604 12:01:25.794558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v58q7" condition "Ready" to 2026-06-04 12:01:25.794547229 +0000 UTC m=+449.387742237 I0604 12:01:25.795130 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:01:25.795113748 +0000 UTC m=+449.388308766 I0604 12:01:25.820023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:25.820274 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:01:25.820266312 +0000 UTC m=+449.413461320 I0604 12:01:25.830533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:25.832942 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:01:25.832937555 +0000 UTC m=+449.426132563 I0604 12:01:25.849711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:25.864492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:25.864847 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:01:25.864821807 +0000 UTC m=+449.458016815 E0604 12:01:25.874166 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-jvhmn\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0604 12:01:26.013319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:26.499661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:26.548792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kqzsm" condition "Approved" to 2026-06-04 12:01:26.54877583 +0000 UTC m=+450.141970848 I0604 12:01:26.676369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kqzsm" condition "Ready" to 2026-06-04 12:01:26.676356473 +0000 UTC m=+450.269551491 I0604 12:01:26.848024 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:01:26.848012634 +0000 UTC m=+450.441207652 I0604 12:01:27.001815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:35.360455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 12:01:35.360519 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls" condition "Issuing" to 2026-06-04 12:01:35.360488767 +0000 UTC m=+458.953683775 I0604 12:01:35.360579 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls" condition "Ready" to 2026-06-04 12:01:35.360556098 +0000 UTC m=+458.953751136 I0604 12:01:35.385903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:35.386013 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls" condition "Ready" to 2026-06-04 12:01:35.38600492 +0000 UTC m=+458.979199938 I0604 12:01:35.789153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:35.836095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nqfhs-gkc27" condition "Approved" to 2026-06-04 12:01:35.836083317 +0000 UTC m=+459.429278335 I0604 12:01:35.861847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nqfhs-gkc27" condition "Ready" to 2026-06-04 12:01:35.861833123 +0000 UTC m=+459.455028131 I0604 12:01:35.909178 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:01:35.909162641 +0000 UTC m=+459.502357679 I0604 12:01:35.928335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:35.928528 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:01:35.928525267 +0000 UTC m=+459.521720275 I0604 12:01:35.961473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqfhs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:54.285167 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-04 12:01:54.285146864 +0000 UTC m=+477.878341902 I0604 12:01:54.285269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 12:01:54.285327 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-04 12:01:54.285313037 +0000 UTC m=+477.878508075 I0604 12:01:54.327909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:54.328038 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-04 12:01:54.328030082 +0000 UTC m=+477.921225100 I0604 12:01:54.637812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:54.910370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-25pc4" condition "Approved" to 2026-06-04 12:01:54.91035668 +0000 UTC m=+478.503551718 I0604 12:01:55.008931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-25pc4" condition "Ready" to 2026-06-04 12:01:55.008919082 +0000 UTC m=+478.602114100 I0604 12:01:55.162448 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:01:55.162431225 +0000 UTC m=+478.755626263 I0604 12:01:55.287685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:01:55.288226 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:01:55.288215793 +0000 UTC m=+478.881410811 I0604 12:01:55.364062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:05:16.382528 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-04 12:05:16.382513142 +0000 UTC m=+679.975708160 I0604 12:05:16.382899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 12:05:16.383023 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-04 12:05:16.383012759 +0000 UTC m=+679.976207797 I0604 12:05:16.401617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:05:16.401803 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-04 12:05:16.401795106 +0000 UTC m=+679.994990114 I0604 12:05:16.548237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:05:16.578390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-766rz" condition "Approved" to 2026-06-04 12:05:16.578379402 +0000 UTC m=+680.171574410 I0604 12:05:16.602605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-766rz" condition "Ready" to 2026-06-04 12:05:16.60259397 +0000 UTC m=+680.195788988 I0604 12:05:16.640932 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:05:16.640916705 +0000 UTC m=+680.234111723 I0604 12:05:16.673749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:05:16.674595 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:05:16.674589628 +0000 UTC m=+680.267784636 I0604 12:05:16.687360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:05:16.696502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:05:16.696960 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:05:16.696951773 +0000 UTC m=+680.290146781 I0604 12:06:05.724977 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0604 12:06:05.725060 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-04 12:06:05.725053573 +0000 UTC m=+729.318248581 I0604 12:06:05.725143 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-04 12:06:05.725071294 +0000 UTC m=+729.318266312 I0604 12:06:05.743875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:06:05.744210 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-04 12:06:05.744184376 +0000 UTC m=+729.337379524 I0604 12:06:05.889366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:06:05.947215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-blvlx" condition "Approved" to 2026-06-04 12:06:05.947203851 +0000 UTC m=+729.540398869 I0604 12:06:05.967480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-blvlx" condition "Ready" to 2026-06-04 12:06:05.967464109 +0000 UTC m=+729.560659127 I0604 12:06:06.002969 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:06:06.002953905 +0000 UTC m=+729.596148923 I0604 12:06:06.039984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:06:06.040442 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:06:06.040434941 +0000 UTC m=+729.633629959 I0604 12:06:06.065320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0604 12:06:06.065640 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-04 12:06:06.065631046 +0000 UTC m=+729.658826064