I0618 12:33:56.528111 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0618 12:33:56.528212 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0618 12:33:56.528317 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0618 12:33:56.535290 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0618 12:33:56.535806 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0618 12:33:56.535970 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0618 12:33:56.536333 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0618 12:33:56.540480 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0618 12:33:56.706537 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0618 12:33:56.711123 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0618 12:33:56.713096 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0618 12:33:56.713132 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0618 12:33:56.713142 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0618 12:33:56.713146 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0618 12:33:56.716002 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0618 12:33:56.719463 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0618 12:33:56.723237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0618 12:33:56.725468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0618 12:33:56.728143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0618 12:33:56.730310 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0618 12:33:56.730332 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0618 12:33:56.730390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0618 12:33:56.732126 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0618 12:33:56.733781 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0618 12:33:56.735621 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0618 12:33:56.739162 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0618 12:33:56.744180 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0618 12:33:56.748107 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0618 12:33:56.752035 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0618 12:33:56.754296 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0618 12:33:56.756026 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0618 12:33:56.757592 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0618 12:33:56.757938 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0618 12:33:56.761959 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:33:56.762306 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:33:56.762682 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:33:56.763712 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:33:56.825221 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:33:56.827253 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:33:56.842670 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:33:56.858542 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:33:56.861641 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:33:56.877577 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:34:21.226767 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-18 12:34:21.226729199 +0000 UTC m=+24.731756534 I0618 12:34:22.081891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:34:22.081956 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-18 12:34:22.081944906 +0000 UTC m=+25.586972251 I0618 12:34:22.082026 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-18 12:34:22.082021548 +0000 UTC m=+25.587048853 E0618 12:34:22.330459 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:34:22.330528 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-18 12:34:22.330518407 +0000 UTC m=+25.835545712 E0618 12:34:22.330553 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:34:22.337472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:22.337995 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-18 12:34:22.33753784 +0000 UTC m=+25.842565145 E0618 12:34:23.263393 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0618 12:34:23.263500 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:34:23.263545 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:34:23.263592 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0618 12:34:23.586472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:24.029244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-skvzg" condition "Approved" to 2026-06-18 12:34:24.029234347 +0000 UTC m=+27.534261662 I0618 12:34:24.169443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-skvzg" condition "Ready" to 2026-06-18 12:34:24.169432318 +0000 UTC m=+27.674459633 I0618 12:34:24.212890 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:34:24.212876856 +0000 UTC m=+27.717904191 I0618 12:34:24.346350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:24.346984 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:34:24.34697047 +0000 UTC m=+27.851997815 I0618 12:34:24.674342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:28.263991 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:34:28.263971458 +0000 UTC m=+31.768998833 I0618 12:34:56.297806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:34:56.297846 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-18 12:34:56.297838102 +0000 UTC m=+59.802865407 I0618 12:34:56.297959 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-18 12:34:56.297868233 +0000 UTC m=+59.802895558 I0618 12:34:56.310714 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-18 12:34:56.310701292 +0000 UTC m=+59.815728607 I0618 12:34:56.330672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:56.331658 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-18 12:34:56.331648277 +0000 UTC m=+59.836675622 I0618 12:34:56.671109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:56.704274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-l4z2h" condition "Approved" to 2026-06-18 12:34:56.704262475 +0000 UTC m=+60.209289800 I0618 12:34:56.751586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-l4z2h" condition "Ready" to 2026-06-18 12:34:56.751574035 +0000 UTC m=+60.256601340 I0618 12:34:56.787628 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:34:56.787614643 +0000 UTC m=+60.292641958 I0618 12:34:56.811190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:46.264385 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-87.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:40:46.264423 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Issuing" to 2026-06-18 12:40:46.264415989 +0000 UTC m=+409.769443294 I0618 12:40:46.264707 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Ready" to 2026-06-18 12:40:46.264693032 +0000 UTC m=+409.769720347 I0618 12:40:46.281595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-87.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-87.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:46.281660 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Ready" to 2026-06-18 12:40:46.281654581 +0000 UTC m=+409.786681886 I0618 12:40:46.590709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-87.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-87.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:46.619060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-87.nip.io-tls-7t8kg" condition "Approved" to 2026-06-18 12:40:46.619048704 +0000 UTC m=+410.124076019 I0618 12:40:46.652734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-87.nip.io-tls-7t8kg" condition "Ready" to 2026-06-18 12:40:46.652723589 +0000 UTC m=+410.157750914 I0618 12:40:46.689817 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:40:46.689802709 +0000 UTC m=+410.194830024 I0618 12:40:46.708503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-87.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-87.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:46.709275 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:40:46.709264951 +0000 UTC m=+410.214292296 I0618 12:40:46.730720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-87.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-87.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:46.731119 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:40:46.731109177 +0000 UTC m=+410.236136502 I0618 12:42:07.432700 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:42:07.432746 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-18 12:42:07.43273432 +0000 UTC m=+490.937761655 I0618 12:42:07.432742 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-18 12:42:07.432731879 +0000 UTC m=+490.937759214 E0618 12:42:07.449342 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:42:07.449395 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-18 12:42:07.449385448 +0000 UTC m=+490.954412763 E0618 12:42:07.449456 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:42:07.452556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:42:07.452598 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:42:07.452610 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-18 12:42:07.452606185 +0000 UTC m=+490.957633490 E0618 12:42:07.484752 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0618 12:42:07.484909 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:42:07.485006 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:42:07.485065 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0618 12:42:07.534750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:42:07.552902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-864qb" condition "Approved" to 2026-06-18 12:42:07.552891808 +0000 UTC m=+491.057919113 I0618 12:42:07.610807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-864qb" condition "Ready" to 2026-06-18 12:42:07.610791042 +0000 UTC m=+491.115818377 I0618 12:42:07.737551 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:42:07.737533457 +0000 UTC m=+491.242560802 I0618 12:42:07.794078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:42:07.794488 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:42:07.794480701 +0000 UTC m=+491.299508016 I0618 12:42:07.976040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:42:12.485763 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:42:12.485746247 +0000 UTC m=+495.990773592 I0618 12:43:06.015830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:43:06.015948 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-18 12:43:06.015937105 +0000 UTC m=+549.520964430 I0618 12:43:06.016222 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-18 12:43:06.015800192 +0000 UTC m=+549.520827537 I0618 12:43:06.048394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:06.048626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:43:06.048656 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-18 12:43:06.048648364 +0000 UTC m=+549.553675679 I0618 12:43:06.049083 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-18 12:43:06.049074495 +0000 UTC m=+549.554101820 I0618 12:43:06.049473 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-18 12:43:06.049424165 +0000 UTC m=+549.554451480 I0618 12:43:06.050756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:43:06.050785 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-18 12:43:06.050779502 +0000 UTC m=+549.555806807 I0618 12:43:06.051786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:43:06.060261 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-18 12:43:06.051805449 +0000 UTC m=+549.556832754 I0618 12:43:06.105553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:06.105597 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-18 12:43:06.105590913 +0000 UTC m=+549.610618218 I0618 12:43:06.106381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:06.106439 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:43:06.106461 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-18 12:43:06.106456127 +0000 UTC m=+549.611483422 I0618 12:43:06.352350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:06.382559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:06.383230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-skzks" condition "Approved" to 2026-06-18 12:43:06.383222061 +0000 UTC m=+549.888249366 I0618 12:43:06.383689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bc2dd" condition "Approved" to 2026-06-18 12:43:06.383682353 +0000 UTC m=+549.888709668 I0618 12:43:06.416591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gqxdw" condition "Approved" to 2026-06-18 12:43:06.416576997 +0000 UTC m=+549.921604312 I0618 12:43:06.417975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bc2dd" condition "Ready" to 2026-06-18 12:43:06.417970075 +0000 UTC m=+549.922997370 I0618 12:43:06.418775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-skzks" condition "Ready" to 2026-06-18 12:43:06.418763456 +0000 UTC m=+549.923790781 I0618 12:43:06.453263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gqxdw" condition "Ready" to 2026-06-18 12:43:06.453246072 +0000 UTC m=+549.958273437 I0618 12:43:06.551190 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:43:06.551172783 +0000 UTC m=+550.056200118 I0618 12:43:06.627356 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:43:06.627340959 +0000 UTC m=+550.132368274 I0618 12:43:06.797547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:06.801606 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:43:06.80159877 +0000 UTC m=+550.306626075 I0618 12:43:07.406636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:07.407126 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:43:07.407118126 +0000 UTC m=+550.912145441 I0618 12:43:07.561890 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:43:07.561876596 +0000 UTC m=+551.066903901 I0618 12:43:07.883365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:07.895039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:07.895620 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:43:07.895613315 +0000 UTC m=+551.400640620 I0618 12:43:07.914062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:07.914062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:08.035614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:26.877922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:43:26.877958 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls" condition "Issuing" to 2026-06-18 12:43:26.877950347 +0000 UTC m=+570.382977672 I0618 12:43:26.878333 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls" condition "Ready" to 2026-06-18 12:43:26.878326766 +0000 UTC m=+570.383354081 I0618 12:43:26.899378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:26.899775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:43:26.899906 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls" condition "Issuing" to 2026-06-18 12:43:26.899800434 +0000 UTC m=+570.404827749 I0618 12:43:27.243074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7vtjs-5phg8" condition "Approved" to 2026-06-18 12:43:27.243062139 +0000 UTC m=+570.748089434 I0618 12:43:27.262879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7vtjs-5phg8" condition "Ready" to 2026-06-18 12:43:27.262864212 +0000 UTC m=+570.767891537 I0618 12:43:27.322482 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:43:27.322468237 +0000 UTC m=+570.827495552 I0618 12:43:27.346173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:27.434614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7vtjs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:53.839407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:43:53.839446 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-18 12:43:53.839438966 +0000 UTC m=+597.344466271 I0618 12:43:53.851225 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-18 12:43:53.851159958 +0000 UTC m=+597.356187273 I0618 12:43:54.146370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:54.146491 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-18 12:43:54.146484106 +0000 UTC m=+597.651511421 I0618 12:43:54.179569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:54.179810 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-18 12:43:54.179799013 +0000 UTC m=+597.684826338 I0618 12:43:54.180499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:54.188882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8rlds" condition "Approved" to 2026-06-18 12:43:54.188860298 +0000 UTC m=+597.693887603 I0618 12:43:54.237595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8rlds" condition "Ready" to 2026-06-18 12:43:54.237581678 +0000 UTC m=+597.742608993 I0618 12:43:54.280241 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:43:54.280223697 +0000 UTC m=+597.785251022 I0618 12:43:54.307739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:47:50.672621 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:47:50.672716 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-18 12:47:50.672707882 +0000 UTC m=+834.177735187 I0618 12:47:50.673525 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-18 12:47:50.673512677 +0000 UTC m=+834.178539992 I0618 12:47:50.693638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:47:50.693725 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:47:50.693748 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-18 12:47:50.69373995 +0000 UTC m=+834.198767295 I0618 12:47:50.953708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dc99f" condition "Approved" to 2026-06-18 12:47:50.953696403 +0000 UTC m=+834.458723728 I0618 12:47:50.976667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dc99f" condition "Ready" to 2026-06-18 12:47:50.976655557 +0000 UTC m=+834.481682862 I0618 12:47:51.019908 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:47:51.019891163 +0000 UTC m=+834.524918478 I0618 12:47:51.044616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:47:51.045189 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:47:51.045182282 +0000 UTC m=+834.550209597 I0618 12:47:51.078722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:49:02.001661 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:49:02.001704 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-18 12:49:02.001694164 +0000 UTC m=+905.506721529 I0618 12:49:02.004119 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-18 12:49:02.004111228 +0000 UTC m=+905.509138553 I0618 12:49:02.026687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:49:02.026770 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-18 12:49:02.026763014 +0000 UTC m=+905.531790319 I0618 12:49:02.364828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:49:02.404515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-tm8ft" condition "Approved" to 2026-06-18 12:49:02.404502292 +0000 UTC m=+905.909529637 I0618 12:49:02.423239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-tm8ft" condition "Ready" to 2026-06-18 12:49:02.423231017 +0000 UTC m=+905.928258322 I0618 12:49:02.464325 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:49:02.464312384 +0000 UTC m=+905.969339689 I0618 12:49:02.489057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"