I0622 01:49:15.931720 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0622 01:49:15.931916 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0622 01:49:15.932017 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0622 01:49:15.935529 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0622 01:49:15.935888 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0622 01:49:15.935965 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0622 01:49:15.936060 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0622 01:49:15.939378 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0622 01:49:15.952002 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0622 01:49:15.955293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0622 01:49:15.958175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0622 01:49:15.960851 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0622 01:49:15.963429 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0622 01:49:15.963497 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0622 01:49:15.969316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0622 01:49:15.974403 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0622 01:49:15.976858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0622 01:49:15.979510 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0622 01:49:15.981897 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0622 01:49:15.981927 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0622 01:49:15.981938 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0622 01:49:15.981938 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0622 01:49:15.985495 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0622 01:49:15.987570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0622 01:49:15.992702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0622 01:49:15.997204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0622 01:49:16.000875 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0622 01:49:16.000930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0622 01:49:16.004069 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0622 01:49:16.004119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0622 01:49:16.006842 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0622 01:49:16.009478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0622 01:49:16.012474 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0622 01:49:16.014932 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:49:16.014938 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:49:16.016798 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:49:16.034989 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:49:16.052205 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:49:16.067549 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:49:16.084326 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:49:16.103368 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:49:16.103464 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:49:16.114420 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0622 01:49:28.738066 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-22 01:49:28.738051154 +0000 UTC m=+12.837911361 I0622 01:49:29.437528 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-22 01:49:29.437516452 +0000 UTC m=+13.537376629 I0622 01:49:29.438050 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:49:29.438186 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-22 01:49:29.438157278 +0000 UTC m=+13.538017485 I0622 01:49:29.453017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:49:29.453131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:49:29.453147 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-22 01:49:29.453140823 +0000 UTC m=+13.553001000 E0622 01:49:29.453199 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0622 01:49:29.453271 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-22 01:49:29.453264257 +0000 UTC m=+13.553124424 E0622 01:49:29.453290 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 01:49:29.462184 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0622 01:49:29.462632 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 01:49:29.462662 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 01:49:29.462756 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0622 01:49:29.494280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:49:29.499244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fqh6b" condition "Approved" to 2026-06-22 01:49:29.499195259 +0000 UTC m=+13.599055466 I0622 01:49:29.511305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fqh6b" condition "Ready" to 2026-06-22 01:49:29.511292401 +0000 UTC m=+13.611152578 I0622 01:49:29.532949 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:49:29.532936887 +0000 UTC m=+13.632797064 I0622 01:49:29.545052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:49:29.582400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:49:34.462959 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:49:34.462945175 +0000 UTC m=+18.562805382 I0622 01:50:08.043875 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-22 01:50:08.043848393 +0000 UTC m=+52.143708560 I0622 01:50:08.044036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:50:08.044394 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-22 01:50:08.044388404 +0000 UTC m=+52.144248571 I0622 01:50:08.059516 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-22 01:50:08.059482762 +0000 UTC m=+52.159342929 I0622 01:50:08.078585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:50:08.078783 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:50:08.078855 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-22 01:50:08.078844947 +0000 UTC m=+52.178705124 I0622 01:50:08.276097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vvnkn" condition "Approved" to 2026-06-22 01:50:08.27608505 +0000 UTC m=+52.375945217 I0622 01:50:08.302545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vvnkn" condition "Ready" to 2026-06-22 01:50:08.30253476 +0000 UTC m=+52.402394937 I0622 01:50:08.333886 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:50:08.333874659 +0000 UTC m=+52.433734826 I0622 01:50:08.357864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:50:08.358282 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:50:08.358276107 +0000 UTC m=+52.458136274 I0622 01:50:08.379423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:50:08.379806 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:50:08.379797026 +0000 UTC m=+52.479657183 I0622 01:50:08.380245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:54:29.253215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:54:29.253272 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-06-22 01:54:29.253248287 +0000 UTC m=+313.353108454 I0622 01:54:29.253176 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-06-22 01:54:29.253159954 +0000 UTC m=+313.353020121 I0622 01:54:29.270917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:54:29.270984 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-06-22 01:54:29.270976534 +0000 UTC m=+313.370836711 I0622 01:54:29.492573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:54:29.538149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-jwk4w" condition "Approved" to 2026-06-22 01:54:29.538138094 +0000 UTC m=+313.637998251 I0622 01:54:29.566167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-jwk4w" condition "Ready" to 2026-06-22 01:54:29.56615503 +0000 UTC m=+313.666015207 I0622 01:54:29.592636 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:54:29.592617046 +0000 UTC m=+313.692477253 I0622 01:54:29.610811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:54:29.611210 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:54:29.61119959 +0000 UTC m=+313.711059777 I0622 01:54:29.618841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:54:29.636654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:55:35.774301 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-22 01:55:35.774272972 +0000 UTC m=+379.874133149 I0622 01:55:35.775011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:55:35.775073 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-22 01:55:35.775058353 +0000 UTC m=+379.874918560 E0622 01:55:35.789549 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0622 01:55:35.789588 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-22 01:55:35.789578239 +0000 UTC m=+379.889438416 E0622 01:55:35.789631 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0622 01:55:35.791757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:55:35.791857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:55:35.791888 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-22 01:55:35.79187969 +0000 UTC m=+379.891739877 E0622 01:55:35.801711 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0622 01:55:35.801801 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 01:55:35.801838 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0622 01:55:35.801875 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0622 01:55:35.830030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:55:35.832596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4zh8k" condition "Approved" to 2026-06-22 01:55:35.832585102 +0000 UTC m=+379.932445279 I0622 01:55:35.845842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4zh8k" condition "Ready" to 2026-06-22 01:55:35.845833385 +0000 UTC m=+379.945693552 I0622 01:55:35.870569 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:55:35.870554562 +0000 UTC m=+379.970414739 I0622 01:55:35.888048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:55:35.935480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:55:40.802292 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:55:40.802278181 +0000 UTC m=+384.902138378 I0622 01:56:30.597446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:56:30.598069 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-22 01:56:30.598062785 +0000 UTC m=+434.697922952 I0622 01:56:30.598934 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-22 01:56:30.598917705 +0000 UTC m=+434.698777872 I0622 01:56:30.615687 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-22 01:56:30.615669764 +0000 UTC m=+434.715529921 I0622 01:56:30.615982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:56:30.616008 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-22 01:56:30.616005402 +0000 UTC m=+434.715865569 I0622 01:56:30.616195 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-22 01:56:30.616191826 +0000 UTC m=+434.716051993 I0622 01:56:30.616344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:56:30.616356 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-22 01:56:30.61635343 +0000 UTC m=+434.716213597 I0622 01:56:30.633152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:30.633212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:56:30.633231 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-22 01:56:30.633226102 +0000 UTC m=+434.733086269 I0622 01:56:30.647108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:30.647167 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-22 01:56:30.647159914 +0000 UTC m=+434.747020091 I0622 01:56:30.647274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:30.647329 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-22 01:56:30.647324088 +0000 UTC m=+434.747184255 I0622 01:56:30.899492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:31.050664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kv8qq" condition "Approved" to 2026-06-22 01:56:31.050655912 +0000 UTC m=+435.150516079 I0622 01:56:31.079911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kv8qq" condition "Ready" to 2026-06-22 01:56:31.079897687 +0000 UTC m=+435.179757854 I0622 01:56:31.139076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:56:31.139115 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-22 01:56:31.139109445 +0000 UTC m=+435.238969612 I0622 01:56:31.141392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z4llj" condition "Approved" to 2026-06-22 01:56:31.141382829 +0000 UTC m=+435.241242996 I0622 01:56:31.166021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z4llj" condition "Ready" to 2026-06-22 01:56:31.166011314 +0000 UTC m=+435.265871481 E0622 01:56:31.172515 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-4qjh9\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0622 01:56:31.188171 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:56:31.188161431 +0000 UTC m=+435.288021608 I0622 01:56:31.189268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0622 01:56:31.194281 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-4qjh9\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0622 01:56:31.338143 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-z4llj" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-2hwln" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0622 01:56:31.373624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pr6cd" condition "Approved" to 2026-06-22 01:56:31.37361386 +0000 UTC m=+435.473474027 I0622 01:56:31.391553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pr6cd" condition "Ready" to 2026-06-22 01:56:31.391539506 +0000 UTC m=+435.491399693 E0622 01:56:31.837968 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-2hwln\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0622 01:56:32.022100 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:56:32.022084796 +0000 UTC m=+436.121944973 I0622 01:56:32.023117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:32.283549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-84vzz" condition "Approved" to 2026-06-22 01:56:32.282761903 +0000 UTC m=+436.382622080 I0622 01:56:32.283934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:32.542523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-84vzz" condition "Ready" to 2026-06-22 01:56:32.542507859 +0000 UTC m=+436.642368066 I0622 01:56:33.111335 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:56:33.111320655 +0000 UTC m=+437.211180822 I0622 01:56:33.233789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:33.299210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:33.583077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:45.383748 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" condition "Ready" to 2026-06-22 01:56:45.3837284 +0000 UTC m=+449.483588597 I0622 01:56:45.383872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:56:45.383914 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" condition "Issuing" to 2026-06-22 01:56:45.383904524 +0000 UTC m=+449.483764701 I0622 01:56:45.404449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:45.404555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:56:45.404615 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" condition "Issuing" to 2026-06-22 01:56:45.404605695 +0000 UTC m=+449.504465892 I0622 01:56:45.620148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ws9qc-pvm9w" condition "Approved" to 2026-06-22 01:56:45.620136985 +0000 UTC m=+449.719997152 I0622 01:56:45.649233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ws9qc-pvm9w" condition "Ready" to 2026-06-22 01:56:45.649215191 +0000 UTC m=+449.749075388 I0622 01:56:45.680605 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:56:45.68059027 +0000 UTC m=+449.780450447 I0622 01:56:45.704079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:45.704509 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:56:45.704501386 +0000 UTC m=+449.804361553 I0622 01:56:45.709664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:45.716874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:45.721171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:56:45.721457 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ws9qc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:56:45.72145031 +0000 UTC m=+449.821310477 I0622 01:57:10.342934 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-22 01:57:10.342912383 +0000 UTC m=+474.442772550 I0622 01:57:10.343236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:57:10.343252 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-22 01:57:10.343248411 +0000 UTC m=+474.443108578 I0622 01:57:10.355140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 01:57:10.355265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 01:57:10.355320 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-22 01:57:10.355312371 +0000 UTC m=+474.455172548 I0622 01:57:10.755884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6sb26" condition "Approved" to 2026-06-22 01:57:10.755869095 +0000 UTC m=+474.855729272 I0622 01:57:10.773567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6sb26" condition "Ready" to 2026-06-22 01:57:10.773555872 +0000 UTC m=+474.873416039 I0622 01:57:10.802340 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 01:57:10.802324797 +0000 UTC m=+474.902184964 I0622 01:57:10.819985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0622 02:00:27.281353 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-22 02:00:27.281340033 +0000 UTC m=+671.381200200 I0622 02:00:27.281823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0622 02:00:27.281880 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-22 02:00:27.281873633 +0000 UTC m=+671.381733810 I0622 02:00:27.302924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0622 02:00:27.302986 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-22 02:00:27.302979744 +0000 UTC m=+671.402839911 I0622 02:00:27.397407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0622 02:00:27.429254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mxmjn" condition "Approved" to 2026-06-22 02:00:27.429243162 +0000 UTC m=+671.529103329 I0622 02:00:27.452752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mxmjn" condition "Ready" to 2026-06-22 02:00:27.45274188 +0000 UTC m=+671.552602047 I0622 02:00:27.484673 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 02:00:27.484651371 +0000 UTC m=+671.584511578 I0622 02:00:27.537068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0622 02:00:27.537307 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 02:00:27.537301716 +0000 UTC m=+671.637161883 I0622 02:00:27.552870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0622 02:00:27.556077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0622 02:00:27.556336 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-22 02:00:27.556328777 +0000 UTC m=+671.656188944 E0622 02:00:49.865609 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out