I0623 08:26:08.786230 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0623 08:26:08.786426 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0623 08:26:08.789645 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0623 08:26:08.789711 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0623 08:26:08.789730 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0623 08:26:08.790482 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0623 08:26:08.790590 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0623 08:26:08.790498 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0623 08:26:08.794535 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0623 08:26:08.813926 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0623 08:26:08.818447 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0623 08:26:08.821580 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0623 08:26:08.827284 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0623 08:26:08.829632 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0623 08:26:08.829661 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0623 08:26:08.829677 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0623 08:26:08.831727 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0623 08:26:08.833500 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0623 08:26:08.835374 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0623 08:26:08.842461 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0623 08:26:08.846305 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0623 08:26:08.848075 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0623 08:26:08.849728 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0623 08:26:08.851647 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0623 08:26:08.851803 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0623 08:26:08.853699 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0623 08:26:08.854044 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0623 08:26:08.855809 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0623 08:26:08.857836 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0623 08:26:08.861875 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0623 08:26:08.864499 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0623 08:26:08.864517 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0623 08:26:08.864663 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0623 08:26:08.868681 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0623 08:26:08.870198 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:08.870396 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:08.871565 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:08.871768 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:08.872071 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:08.872270 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:08.890378 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:08.907580 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:08.926377 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:08.950467 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:08.965507 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0623 08:26:20.183928 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-23 08:26:20.183904432 +0000 UTC m=+11.421296406 I0623 08:26:20.860627 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-23 08:26:20.860618186 +0000 UTC m=+12.098010160 I0623 08:26:20.861784 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:26:20.861813 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-23 08:26:20.86180602 +0000 UTC m=+12.099197994 I0623 08:26:20.872952 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:26:20.873187 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-23 08:26:20.873167699 +0000 UTC m=+12.110559673 E0623 08:26:20.876361 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0623 08:26:20.876404 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-23 08:26:20.876398135 +0000 UTC m=+12.113790109 E0623 08:26:20.876446 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 08:26:20.890256 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0623 08:26:20.890381 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 08:26:20.890423 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 08:26:20.890488 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0623 08:26:20.891989 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:26:20.918407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-23 08:26:20.918384414 +0000 UTC m=+12.155776418 I0623 08:26:20.941509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-23 08:26:20.941498101 +0000 UTC m=+12.178890075 I0623 08:26:20.958999 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:26:20.958992606 +0000 UTC m=+12.196384580 I0623 08:26:20.973994 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:26:20.974420 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:26:20.974412257 +0000 UTC m=+12.211804231 I0623 08:26:20.995276 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:26:25.890728 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:26:25.890718484 +0000 UTC m=+17.128110448 I0623 08:26:47.692602 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-23 08:26:47.692585463 +0000 UTC m=+38.929977417 I0623 08:26:47.693012 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:26:47.693071 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-23 08:26:47.693064671 +0000 UTC m=+38.930456635 I0623 08:26:47.707990 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-23 08:26:47.707974559 +0000 UTC m=+38.945366553 I0623 08:26:47.711506 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:26:47.711663 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-23 08:26:47.71164805 +0000 UTC m=+38.949040114 I0623 08:26:47.983036 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:26:48.011964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-23 08:26:48.011950588 +0000 UTC m=+39.249342582 I0623 08:26:48.033790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-23 08:26:48.0337794 +0000 UTC m=+39.271171374 I0623 08:26:48.072206 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:26:48.072191716 +0000 UTC m=+39.309583720 I0623 08:26:48.085356 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:26:48.087911 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:26:48.087904126 +0000 UTC m=+39.325296100 I0623 08:26:48.104138 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:26:48.111854 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:31:33.235108 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-06-23 08:31:33.235068728 +0000 UTC m=+324.472460702 I0623 08:31:33.235347 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:31:33.235747 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-06-23 08:31:33.235739358 +0000 UTC m=+324.473131332 I0623 08:31:33.245274 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:31:33.245662 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:31:33.245761 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-06-23 08:31:33.245727279 +0000 UTC m=+324.483119253 I0623 08:31:33.538054 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:31:33.553026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-1" condition "Approved" to 2026-06-23 08:31:33.553015963 +0000 UTC m=+324.790407937 I0623 08:31:33.566831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-1" condition "Ready" to 2026-06-23 08:31:33.566820706 +0000 UTC m=+324.804212680 I0623 08:31:33.585309 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:31:33.585296914 +0000 UTC m=+324.822688888 I0623 08:31:33.598110 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:31:33.598707 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:31:33.598699399 +0000 UTC m=+324.836091373 I0623 08:31:33.613587 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:32:36.627956 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-23 08:32:36.627936781 +0000 UTC m=+387.865328755 I0623 08:32:36.627976 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:32:36.628301 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-23 08:32:36.628270445 +0000 UTC m=+387.865662419 I0623 08:32:36.637992 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:32:36.638081 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:32:36.638119 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-23 08:32:36.638110756 +0000 UTC m=+387.875502730 E0623 08:32:36.638726 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0623 08:32:36.638777 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-23 08:32:36.638773066 +0000 UTC m=+387.876165040 E0623 08:32:36.638791 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 08:32:36.647624 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0623 08:32:36.647682 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 08:32:36.647801 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 08:32:36.647834 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0623 08:32:36.666478 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:32:36.673864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-23 08:32:36.673855478 +0000 UTC m=+387.911247452 I0623 08:32:36.686037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-23 08:32:36.686024832 +0000 UTC m=+387.923416806 I0623 08:32:36.711436 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:32:36.711426725 +0000 UTC m=+387.948818689 I0623 08:32:36.725989 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:32:36.764031 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:32:41.648264 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:32:41.648248251 +0000 UTC m=+392.885640225 I0623 08:33:25.447215 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-23 08:33:25.447183592 +0000 UTC m=+436.684575586 I0623 08:33:25.447629 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-23 08:33:25.447623308 +0000 UTC m=+436.685015282 I0623 08:33:25.447849 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:33:25.447863 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-23 08:33:25.447859571 +0000 UTC m=+436.685251545 I0623 08:33:25.448045 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:33:25.448057 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-23 08:33:25.448054503 +0000 UTC m=+436.685446477 I0623 08:33:25.448312 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:33:25.448326 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-23 08:33:25.448322118 +0000 UTC m=+436.685714092 I0623 08:33:25.448560 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-23 08:33:25.448556571 +0000 UTC m=+436.685948545 I0623 08:33:25.577295 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:25.577449 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:33:25.577500 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-23 08:33:25.577493777 +0000 UTC m=+436.814885741 I0623 08:33:25.580187 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:25.580247 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:33:25.580271 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-23 08:33:25.580262114 +0000 UTC m=+436.817654078 I0623 08:33:25.582503 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:25.582585 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-23 08:33:25.582579825 +0000 UTC m=+436.819971789 I0623 08:33:25.940289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-23 08:33:25.940274005 +0000 UTC m=+437.177665999 I0623 08:33:25.984252 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:25.986573 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:25.992885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-23 08:33:25.992874529 +0000 UTC m=+437.230266503 I0623 08:33:25.994076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-23 08:33:25.994068375 +0000 UTC m=+437.231460349 I0623 08:33:26.024937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-23 08:33:26.024928439 +0000 UTC m=+437.262320413 I0623 08:33:26.128003 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:33:26.127985357 +0000 UTC m=+437.365377331 I0623 08:33:26.132910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-23 08:33:26.132899163 +0000 UTC m=+437.370291167 I0623 08:33:26.222708 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:26.225279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-23 08:33:26.225263568 +0000 UTC m=+437.462655602 I0623 08:33:26.226429 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:33:26.226419653 +0000 UTC m=+437.463811617 I0623 08:33:26.299205 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:33:26.299186406 +0000 UTC m=+437.536578410 I0623 08:33:26.500724 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:26.578121 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:26.579196 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:33:26.579186101 +0000 UTC m=+437.816578095 I0623 08:33:26.618860 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:26.656361 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:33:26.656348753 +0000 UTC m=+437.893740727 I0623 08:33:26.948049 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:26.949028 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:33:26.949015479 +0000 UTC m=+438.186407473 I0623 08:33:27.011119 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:27.300505 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:27.349443 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:35.845468 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:33:35.845508 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" condition "Issuing" to 2026-06-23 08:33:35.845497132 +0000 UTC m=+447.082889106 I0623 08:33:35.845670 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" condition "Ready" to 2026-06-23 08:33:35.845655184 +0000 UTC m=+447.083047158 I0623 08:33:35.864270 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:35.864353 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" condition "Ready" to 2026-06-23 08:33:35.864343751 +0000 UTC m=+447.101735725 I0623 08:33:36.107023 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:36.495810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls-1" condition "Approved" to 2026-06-23 08:33:36.495793878 +0000 UTC m=+447.733185852 I0623 08:33:36.592073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls-1" condition "Ready" to 2026-06-23 08:33:36.592063142 +0000 UTC m=+447.829455116 I0623 08:33:36.663511 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:33:36.663500696 +0000 UTC m=+447.900892680 I0623 08:33:36.792284 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:36.793870 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:33:36.793862241 +0000 UTC m=+448.031254215 I0623 08:33:36.804312 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:36.837242 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jrzhf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:52.479562 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:33:52.479594 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-23 08:33:52.47957311 +0000 UTC m=+463.716965074 I0623 08:33:52.479599 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-23 08:33:52.47959179 +0000 UTC m=+463.716983754 I0623 08:33:52.490951 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:52.491035 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-23 08:33:52.491026549 +0000 UTC m=+463.728418513 I0623 08:33:52.802301 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:33:52.833670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-23 08:33:52.83365739 +0000 UTC m=+464.071049364 I0623 08:33:52.887918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-23 08:33:52.887907417 +0000 UTC m=+464.125299381 I0623 08:33:52.926025 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:33:52.926016553 +0000 UTC m=+464.163408517 I0623 08:33:52.943074 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:37:11.858703 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-23 08:37:11.858688749 +0000 UTC m=+663.096080723 I0623 08:37:11.858938 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:37:11.858997 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-23 08:37:11.858990363 +0000 UTC m=+663.096382327 I0623 08:37:11.872195 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:37:11.872261 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:37:11.872278 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-23 08:37:11.87227157 +0000 UTC m=+663.109663544 I0623 08:37:12.225098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-23 08:37:12.225080175 +0000 UTC m=+663.462472139 I0623 08:37:12.239400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-23 08:37:12.239387954 +0000 UTC m=+663.476779928 I0623 08:37:12.268025 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:37:12.26796816 +0000 UTC m=+663.505360124 I0623 08:37:12.283715 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:37:56.155382 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-23 08:37:56.155362696 +0000 UTC m=+707.392754660 I0623 08:37:56.155468 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:37:56.155787 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-23 08:37:56.155776181 +0000 UTC m=+707.393168155 I0623 08:37:56.165736 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:37:56.165856 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 08:37:56.165897 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-23 08:37:56.165891939 +0000 UTC m=+707.403283903 I0623 08:37:56.407307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-23 08:37:56.40729583 +0000 UTC m=+707.644687794 I0623 08:37:56.424287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-23 08:37:56.424278718 +0000 UTC m=+707.661670682 I0623 08:37:56.449275 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:37:56.44926194 +0000 UTC m=+707.686653914 I0623 08:37:56.461424 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 08:37:56.461948 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 08:37:56.461940058 +0000 UTC m=+707.699332032 I0623 08:37:56.487240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"