I0624 17:56:35.698254 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0624 17:56:35.698355 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0624 17:56:35.698405 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0624 17:56:35.700655 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0624 17:56:35.700974 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0624 17:56:35.701165 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0624 17:56:35.701196 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0624 17:56:35.702706 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0624 17:56:35.789207 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0624 17:56:35.804918 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0624 17:56:35.808559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0624 17:56:35.812948 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0624 17:56:35.817197 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0624 17:56:35.822725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0624 17:56:35.825325 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0624 17:56:35.825397 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0624 17:56:35.825524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0624 17:56:35.827982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0624 17:56:35.830488 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0624 17:56:35.833021 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0624 17:56:35.835778 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0624 17:56:35.837801 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0624 17:56:35.853890 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0624 17:56:35.853923 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0624 17:56:35.854008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0624 17:56:35.857866 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0624 17:56:35.857982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0624 17:56:35.861282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0624 17:56:35.864149 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0624 17:56:35.866493 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0624 17:56:35.869035 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0624 17:56:35.869089 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0624 17:56:35.872520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0624 17:56:35.883599 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:56:35.883841 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:56:35.884569 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:56:35.888630 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:56:35.964016 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:56:35.965029 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:56:35.965595 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:56:35.966703 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:56:35.968163 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:56:36.002345 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:56:48.099617 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-24 17:56:48.099590751 +0000 UTC m=+12.442237691 I0624 17:56:48.842542 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-24 17:56:48.842508678 +0000 UTC m=+13.185155628 I0624 17:56:48.842694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:56:48.842914 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 17:56:48.842901596 +0000 UTC m=+13.185548516 E0624 17:56:48.857705 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 17:56:48.857776 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-24 17:56:48.857769562 +0000 UTC m=+13.200416482 E0624 17:56:48.857923 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 17:56:48.861815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:56:48.861893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:56:48.862036 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 17:56:48.86202744 +0000 UTC m=+13.204674380 E0624 17:56:48.869918 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0624 17:56:48.870133 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:56:48.870190 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:56:48.870286 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0624 17:56:48.905991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jp9ff" condition "Approved" to 2026-06-24 17:56:48.905975097 +0000 UTC m=+13.248622017 I0624 17:56:48.907700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:56:48.923019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jp9ff" condition "Ready" to 2026-06-24 17:56:48.923004828 +0000 UTC m=+13.265651748 I0624 17:56:48.950505 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:56:48.950489124 +0000 UTC m=+13.293136044 I0624 17:56:48.972518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:56:49.016347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:56:53.870818 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:56:53.870803595 +0000 UTC m=+18.213450545 I0624 17:57:21.120060 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:57:21.120122 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 17:57:21.120107464 +0000 UTC m=+45.462754404 I0624 17:57:21.120734 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 17:57:21.120721985 +0000 UTC m=+45.463368935 I0624 17:57:21.135418 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-24 17:57:21.135398802 +0000 UTC m=+45.478045722 I0624 17:57:21.163603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:57:21.164096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:57:21.164140 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 17:57:21.164122864 +0000 UTC m=+45.506769774 I0624 17:57:21.478993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mzzl4" condition "Approved" to 2026-06-24 17:57:21.478977085 +0000 UTC m=+45.821624005 I0624 17:57:21.515111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mzzl4" condition "Ready" to 2026-06-24 17:57:21.515097842 +0000 UTC m=+45.857744752 I0624 17:57:21.567712 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:57:21.567701679 +0000 UTC m=+45.910348589 I0624 17:57:21.599521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:57:21.600840 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:57:21.600829163 +0000 UTC m=+45.943476083 I0624 17:57:21.617290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:57:21.630196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:57:21.630459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:57:21.630729 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:57:21.630722474 +0000 UTC m=+45.973369394 I0624 18:02:24.946663 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-195.nip.io-tls" condition "Ready" to 2026-06-24 18:02:24.946610428 +0000 UTC m=+349.289257348 I0624 18:02:24.947587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-195.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:02:24.947616 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-195.nip.io-tls" condition "Issuing" to 2026-06-24 18:02:24.947610953 +0000 UTC m=+349.290257873 I0624 18:02:24.967852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-195.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-195.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:24.967978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-195.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:02:24.968023 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-195.nip.io-tls" condition "Issuing" to 2026-06-24 18:02:24.96801535 +0000 UTC m=+349.310662270 I0624 18:02:25.158056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-195.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-195.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:25.170154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-195.nip.io-tls-kwqsr" condition "Approved" to 2026-06-24 18:02:25.170142449 +0000 UTC m=+349.512789389 I0624 18:02:25.198982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-195.nip.io-tls-kwqsr" condition "Ready" to 2026-06-24 18:02:25.198969095 +0000 UTC m=+349.541616035 I0624 18:02:25.225023 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-195.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:02:25.225014329 +0000 UTC m=+349.567661249 I0624 18:02:25.241279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-195.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-195.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:03:31.569101 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-24 18:03:31.569014067 +0000 UTC m=+415.911661017 I0624 18:03:31.569257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:03:31.569357 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 18:03:31.569345198 +0000 UTC m=+415.911992118 I0624 18:03:31.586541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:03:31.586662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:03:31.586701 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 18:03:31.586680099 +0000 UTC m=+415.929327019 E0624 18:03:31.588076 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 18:03:31.588173 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-24 18:03:31.588163069 +0000 UTC m=+415.930809989 E0624 18:03:31.588203 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 18:03:31.604642 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0624 18:03:31.604727 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 18:03:31.604755 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 18:03:31.604965 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0624 18:03:31.634494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z9vlr" condition "Approved" to 2026-06-24 18:03:31.634475047 +0000 UTC m=+415.977121957 I0624 18:03:31.647566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z9vlr" condition "Ready" to 2026-06-24 18:03:31.647550433 +0000 UTC m=+415.990197353 I0624 18:03:31.671950 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:03:31.671930054 +0000 UTC m=+416.014576994 I0624 18:03:31.686335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:03:31.686578 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:03:31.686567753 +0000 UTC m=+416.029214673 I0624 18:03:31.704739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:03:36.607839 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:03:36.607818781 +0000 UTC m=+420.950465721 I0624 18:04:24.654916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:04:24.654959 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 18:04:24.654951698 +0000 UTC m=+468.997598598 I0624 18:04:24.655207 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 18:04:24.655203347 +0000 UTC m=+468.997850257 I0624 18:04:24.656065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:04:24.656083 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 18:04:24.656079841 +0000 UTC m=+468.998726751 I0624 18:04:24.656281 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 18:04:24.656277749 +0000 UTC m=+468.998924659 I0624 18:04:24.680718 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:04:24.680892 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 18:04:24.680824751 +0000 UTC m=+469.023471691 I0624 18:04:24.681286 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 18:04:24.681261418 +0000 UTC m=+469.023908328 I0624 18:04:24.715806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:24.715993 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:04:24.716054 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 18:04:24.716037902 +0000 UTC m=+469.058684812 I0624 18:04:24.716466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:24.716531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:04:24.716552 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 18:04:24.716548912 +0000 UTC m=+469.059195822 I0624 18:04:24.720428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:24.720598 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 18:04:24.720592468 +0000 UTC m=+469.063239388 I0624 18:04:24.897111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-54jlv" condition "Approved" to 2026-06-24 18:04:24.897091612 +0000 UTC m=+469.239738532 I0624 18:04:24.920443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-54jlv" condition "Ready" to 2026-06-24 18:04:24.920430108 +0000 UTC m=+469.263077018 I0624 18:04:24.980424 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:04:24.98041406 +0000 UTC m=+469.323060970 I0624 18:04:25.001051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:25.001548 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:04:25.001540821 +0000 UTC m=+469.344187731 I0624 18:04:25.025027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:25.032812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:25.069682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f7wtr" condition "Approved" to 2026-06-24 18:04:25.06966444 +0000 UTC m=+469.412311390 I0624 18:04:25.094109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f7wtr" condition "Ready" to 2026-06-24 18:04:25.09409196 +0000 UTC m=+469.436738890 I0624 18:04:25.102632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qcrfn" condition "Approved" to 2026-06-24 18:04:25.102617487 +0000 UTC m=+469.445264417 I0624 18:04:25.346196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qcrfn" condition "Ready" to 2026-06-24 18:04:25.346185332 +0000 UTC m=+469.688832252 I0624 18:04:25.484727 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:04:25.484705547 +0000 UTC m=+469.827352467 I0624 18:04:25.738012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:25.738542 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:04:25.738533517 +0000 UTC m=+470.081180417 I0624 18:04:25.795203 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:04:25.795179945 +0000 UTC m=+470.137826855 I0624 18:04:26.095790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:26.096253 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:04:26.096244037 +0000 UTC m=+470.438890947 I0624 18:04:26.137820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:26.189192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:26.435552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:40.000919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:04:40.000952 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" condition "Ready" to 2026-06-24 18:04:40.000933747 +0000 UTC m=+484.343580727 I0624 18:04:40.000958 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" condition "Issuing" to 2026-06-24 18:04:40.000951938 +0000 UTC m=+484.343598878 I0624 18:04:40.037554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:40.037642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:04:40.037659 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" condition "Issuing" to 2026-06-24 18:04:40.037651853 +0000 UTC m=+484.380298763 I0624 18:04:40.509543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4bjvv-v64tb" condition "Approved" to 2026-06-24 18:04:40.509507869 +0000 UTC m=+484.852154779 I0624 18:04:40.583878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4bjvv-v64tb" condition "Ready" to 2026-06-24 18:04:40.583858536 +0000 UTC m=+484.926505446 I0624 18:04:40.631575 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:04:40.631559474 +0000 UTC m=+484.974206404 I0624 18:04:40.658338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:40.659965 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:04:40.659956192 +0000 UTC m=+485.002603102 I0624 18:04:40.678569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:40.687359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bjvv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:56.839995 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-24 18:04:56.839970388 +0000 UTC m=+501.182617308 I0624 18:04:56.840109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:04:56.840582 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 18:04:56.840574292 +0000 UTC m=+501.183221212 I0624 18:04:56.857028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:56.857214 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:04:56.857266 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 18:04:56.857259674 +0000 UTC m=+501.199906594 I0624 18:04:57.044002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zdcd8" condition "Approved" to 2026-06-24 18:04:57.043966409 +0000 UTC m=+501.386613309 I0624 18:04:57.069623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zdcd8" condition "Ready" to 2026-06-24 18:04:57.069609041 +0000 UTC m=+501.412255961 I0624 18:04:57.109671 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:04:57.109659224 +0000 UTC m=+501.452306144 I0624 18:04:57.126545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:57.127139 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:04:57.127133139 +0000 UTC m=+501.469780059 I0624 18:04:57.143069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:04:57.154040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:08:15.908160 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 18:08:15.908130372 +0000 UTC m=+700.250777292 I0624 18:08:15.908990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:08:15.909066 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 18:08:15.909058063 +0000 UTC m=+700.251705013 I0624 18:08:15.934862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:08:15.935008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:08:15.935042 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 18:08:15.935031351 +0000 UTC m=+700.277678271 I0624 18:08:16.085521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cc2sx" condition "Approved" to 2026-06-24 18:08:16.085502749 +0000 UTC m=+700.428149659 I0624 18:08:16.105765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cc2sx" condition "Ready" to 2026-06-24 18:08:16.105748277 +0000 UTC m=+700.448395197 I0624 18:08:16.145978 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:08:16.145951271 +0000 UTC m=+700.488598201 I0624 18:08:16.168519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:08:16.168923 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:08:16.168915744 +0000 UTC m=+700.511562654 I0624 18:08:16.200353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:09:00.109159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:09:00.109230 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 18:09:00.10922281 +0000 UTC m=+744.451869720 I0624 18:09:00.109718 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-24 18:09:00.109713867 +0000 UTC m=+744.452360777 I0624 18:09:00.126785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:09:00.126843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:09:00.126965 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 18:09:00.126929755 +0000 UTC m=+744.469576695 I0624 18:09:00.329865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kg5nq" condition "Approved" to 2026-06-24 18:09:00.329843432 +0000 UTC m=+744.672490372 I0624 18:09:00.357930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kg5nq" condition "Ready" to 2026-06-24 18:09:00.357893258 +0000 UTC m=+744.700540188 I0624 18:09:00.402626 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:09:00.402611806 +0000 UTC m=+744.745258726 I0624 18:09:00.450889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"