I0625 22:17:54.840022 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0625 22:17:54.840105 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0625 22:17:54.840172 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0625 22:17:54.845002 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0625 22:17:54.845725 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0625 22:17:54.845810 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0625 22:17:54.845831 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0625 22:17:54.848509 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0625 22:17:54.860992 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0625 22:17:54.863930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0625 22:17:54.867838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0625 22:17:54.871275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0625 22:17:54.875596 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0625 22:17:54.875849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0625 22:17:54.877387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0625 22:17:54.879063 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0625 22:17:54.879079 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0625 22:17:54.879114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0625 22:17:54.882167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0625 22:17:54.884629 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0625 22:17:54.886260 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0625 22:17:54.888027 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0625 22:17:54.888064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0625 22:17:54.891620 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0625 22:17:54.893163 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0625 22:17:54.893241 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0625 22:17:54.894813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0625 22:17:54.896502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0625 22:17:54.898267 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0625 22:17:54.899934 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0625 22:17:54.899959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0625 22:17:54.905094 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0625 22:17:54.909465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0625 22:17:54.914570 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:17:54.914698 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:17:54.915227 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:17:54.915307 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:17:54.937977 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:17:54.978675 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:17:54.990168 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:17:54.997616 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:17:55.008630 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:17:55.028515 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:18:05.741495 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-25 22:18:05.741453802 +0000 UTC m=+10.929060718 I0625 22:18:06.404045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:18:06.404082 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-25 22:18:06.404075865 +0000 UTC m=+11.591682731 I0625 22:18:06.404847 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-25 22:18:06.404833981 +0000 UTC m=+11.592440857 E0625 22:18:06.418453 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0625 22:18:06.419804 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-25 22:18:06.41848354 +0000 UTC m=+11.606090416 E0625 22:18:06.419839 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0625 22:18:06.421280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:18:06.422699 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-25 22:18:06.422683841 +0000 UTC m=+11.610290797 E0625 22:18:06.427488 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0625 22:18:06.427646 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0625 22:18:06.427755 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0625 22:18:06.427861 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0625 22:18:06.442485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:18:06.465938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4gwhb" condition "Approved" to 2026-06-25 22:18:06.465927657 +0000 UTC m=+11.653534533 I0625 22:18:06.483539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4gwhb" condition "Ready" to 2026-06-25 22:18:06.483524732 +0000 UTC m=+11.671131628 I0625 22:18:06.507647 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:18:06.507637849 +0000 UTC m=+11.695244715 I0625 22:18:06.521523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:18:06.557800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:18:11.428958 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:18:11.428940981 +0000 UTC m=+16.616547877 I0625 22:18:32.702160 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-25 22:18:32.70212652 +0000 UTC m=+37.889733396 I0625 22:18:32.702468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:18:32.702525 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-25 22:18:32.702522407 +0000 UTC m=+37.890129263 I0625 22:18:32.723521 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-25 22:18:32.723512034 +0000 UTC m=+37.911118900 I0625 22:18:32.731209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:18:32.731282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:18:32.731308 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-25 22:18:32.731302557 +0000 UTC m=+37.918909443 I0625 22:18:32.904731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:18:32.915345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ph66g" condition "Approved" to 2026-06-25 22:18:32.915335168 +0000 UTC m=+38.102942044 I0625 22:18:32.948872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ph66g" condition "Ready" to 2026-06-25 22:18:32.948837385 +0000 UTC m=+38.136444291 I0625 22:18:32.979500 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:18:32.97949006 +0000 UTC m=+38.167096936 I0625 22:18:32.999885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:18:33.048483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:22:41.764152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-27.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:22:41.764212 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Issuing" to 2026-06-25 22:22:41.764175661 +0000 UTC m=+286.951782547 I0625 22:22:41.764454 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Ready" to 2026-06-25 22:22:41.764434948 +0000 UTC m=+286.952041844 I0625 22:22:41.778031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:22:41.778159 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Ready" to 2026-06-25 22:22:41.778148446 +0000 UTC m=+286.965755352 I0625 22:22:41.899400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:22:41.926384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-27.nip.io-tls-csrqn" condition "Approved" to 2026-06-25 22:22:41.926374751 +0000 UTC m=+287.113981627 I0625 22:22:41.952561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-27.nip.io-tls-csrqn" condition "Ready" to 2026-06-25 22:22:41.952552672 +0000 UTC m=+287.140159548 I0625 22:22:41.975614 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:22:41.975597724 +0000 UTC m=+287.163204630 I0625 22:22:42.049051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:22:42.053061 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:22:42.053056252 +0000 UTC m=+287.240663118 I0625 22:22:42.072458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:22:42.072875 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:22:42.07286839 +0000 UTC m=+287.260475256 I0625 22:23:45.917053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:23:45.917115 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-25 22:23:45.917078911 +0000 UTC m=+351.104685787 I0625 22:23:45.917254 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-25 22:23:45.917232335 +0000 UTC m=+351.104839231 E0625 22:23:45.929035 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0625 22:23:45.929070 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-25 22:23:45.92906471 +0000 UTC m=+351.116671576 E0625 22:23:45.929104 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0625 22:23:45.934243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:23:45.934425 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-25 22:23:45.934411105 +0000 UTC m=+351.122017981 E0625 22:23:45.940541 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0625 22:23:45.940668 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0625 22:23:45.940708 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0625 22:23:45.940760 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0625 22:23:45.950346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:23:45.973275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qq6nr" condition "Approved" to 2026-06-25 22:23:45.97323467 +0000 UTC m=+351.160841576 I0625 22:23:45.985803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qq6nr" condition "Ready" to 2026-06-25 22:23:45.985796482 +0000 UTC m=+351.173403358 I0625 22:23:46.006110 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:23:46.006092185 +0000 UTC m=+351.193699061 I0625 22:23:46.021803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:23:46.022169 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:23:46.022159458 +0000 UTC m=+351.209766324 I0625 22:23:46.038373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:23:46.038833 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:23:46.038821176 +0000 UTC m=+351.226428072 I0625 22:23:50.941248 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:23:50.941234271 +0000 UTC m=+356.128841167 I0625 22:24:31.562435 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:31.563032 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-25 22:24:31.56302606 +0000 UTC m=+396.750632916 I0625 22:24:31.563041 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-25 22:24:31.562490549 +0000 UTC m=+396.750097435 I0625 22:24:31.566516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:31.566556 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-25 22:24:31.566549304 +0000 UTC m=+396.754156170 I0625 22:24:31.569108 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-25 22:24:31.569104388 +0000 UTC m=+396.756711254 I0625 22:24:31.569521 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-25 22:24:31.569513736 +0000 UTC m=+396.757120602 I0625 22:24:31.572516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:31.572533 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-25 22:24:31.57252986 +0000 UTC m=+396.760136716 I0625 22:24:31.628656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:31.628872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:31.628928 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:31.628943 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-25 22:24:31.628937032 +0000 UTC m=+396.816543898 I0625 22:24:31.630330 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-25 22:24:31.628718368 +0000 UTC m=+396.816325224 I0625 22:24:31.633485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:31.636419 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:31.636465 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-25 22:24:31.63645989 +0000 UTC m=+396.824066756 I0625 22:24:31.806455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:31.812703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5dq9g" condition "Approved" to 2026-06-25 22:24:31.812692698 +0000 UTC m=+397.000299574 I0625 22:24:31.826309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5dq9g" condition "Ready" to 2026-06-25 22:24:31.826301573 +0000 UTC m=+397.013908439 I0625 22:24:31.846070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:31.858090 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:31.85808064 +0000 UTC m=+397.045687506 I0625 22:24:31.892070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6nppg" condition "Approved" to 2026-06-25 22:24:31.892060523 +0000 UTC m=+397.079667389 I0625 22:24:31.901738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:31.913991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6nppg" condition "Ready" to 2026-06-25 22:24:31.913985123 +0000 UTC m=+397.101591989 I0625 22:24:32.022770 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:32.022756714 +0000 UTC m=+397.210363570 I0625 22:24:32.048751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:32.049068 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:32.049063895 +0000 UTC m=+397.236670761 I0625 22:24:32.203922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:32.461351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sk2lv" condition "Approved" to 2026-06-25 22:24:32.461338018 +0000 UTC m=+397.648944894 I0625 22:24:32.818134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sk2lv" condition "Ready" to 2026-06-25 22:24:32.818123389 +0000 UTC m=+398.005730265 I0625 22:24:33.003927 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:33.0039126 +0000 UTC m=+398.191519476 I0625 22:24:33.103710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:33.104407 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:33.10440066 +0000 UTC m=+398.292007536 I0625 22:24:33.354111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:33.404104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:39.641376 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w9799-tls" condition "Ready" to 2026-06-25 22:24:39.641355299 +0000 UTC m=+404.828962165 I0625 22:24:39.641393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w9799-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:39.641536 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w9799-tls" condition "Issuing" to 2026-06-25 22:24:39.641524893 +0000 UTC m=+404.829131759 I0625 22:24:39.656370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w9799-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w9799-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:39.656430 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w9799-tls" condition "Ready" to 2026-06-25 22:24:39.656424091 +0000 UTC m=+404.844030977 I0625 22:24:39.795109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w9799-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w9799-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:39.841037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-w9799-l4lcr" condition "Approved" to 2026-06-25 22:24:39.841018064 +0000 UTC m=+405.028624930 I0625 22:24:39.864519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-w9799-l4lcr" condition "Ready" to 2026-06-25 22:24:39.864508189 +0000 UTC m=+405.052115065 I0625 22:24:39.890745 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-w9799-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:39.890736371 +0000 UTC m=+405.078343237 I0625 22:24:39.909964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w9799-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w9799-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:39.954854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w9799-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w9799-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:51.198709 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-25 22:24:51.198687238 +0000 UTC m=+416.386294104 I0625 22:24:51.199117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:51.199138 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-25 22:24:51.199133727 +0000 UTC m=+416.386740593 I0625 22:24:51.227179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:51.227243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:51.227265 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-25 22:24:51.227260965 +0000 UTC m=+416.414867821 I0625 22:24:51.597283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:51.610620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-szpvs" condition "Approved" to 2026-06-25 22:24:51.610605511 +0000 UTC m=+416.798212417 I0625 22:24:51.651029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-szpvs" condition "Ready" to 2026-06-25 22:24:51.651018198 +0000 UTC m=+416.838625074 I0625 22:24:51.681208 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:51.681197328 +0000 UTC m=+416.868804204 I0625 22:24:51.704653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:51.705064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:51.705691 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:51.705684222 +0000 UTC m=+416.893291098 I0625 22:24:51.722464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:28:02.154201 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:28:02.154292 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-25 22:28:02.154275625 +0000 UTC m=+607.341882591 I0625 22:28:02.154586 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-25 22:28:02.15457476 +0000 UTC m=+607.342181656 I0625 22:28:02.168754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:28:02.168911 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-25 22:28:02.168902189 +0000 UTC m=+607.356509075 I0625 22:28:02.349475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:28:02.377289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kcw7p" condition "Approved" to 2026-06-25 22:28:02.37728014 +0000 UTC m=+607.564887006 I0625 22:28:02.393032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kcw7p" condition "Ready" to 2026-06-25 22:28:02.393024013 +0000 UTC m=+607.580630879 I0625 22:28:02.421231 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:28:02.421216152 +0000 UTC m=+607.608823028 I0625 22:28:02.441705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:28:02.442982 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:28:02.442976315 +0000 UTC m=+607.630583181 I0625 22:28:02.458589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:28:43.448350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:28:43.448390 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-25 22:28:43.448383293 +0000 UTC m=+648.635990169 I0625 22:28:43.448544 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-25 22:28:43.448531686 +0000 UTC m=+648.636138572 I0625 22:28:43.474055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:28:43.474231 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-25 22:28:43.474225007 +0000 UTC m=+648.661831883 I0625 22:28:43.566133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:28:43.598579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-v5gs8" condition "Approved" to 2026-06-25 22:28:43.598570053 +0000 UTC m=+648.786176929 I0625 22:28:43.614197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-v5gs8" condition "Ready" to 2026-06-25 22:28:43.614188579 +0000 UTC m=+648.801795445 I0625 22:28:43.641288 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:28:43.641274433 +0000 UTC m=+648.828881299 I0625 22:28:43.664132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"