I0615 19:10:06.713980 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0615 19:10:06.714189 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0615 19:10:06.714378 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0615 19:10:06.721737 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0615 19:10:06.722387 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0615 19:10:06.722509 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0615 19:10:06.722554 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0615 19:10:06.727541 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0615 19:10:06.741205 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0615 19:10:06.744536 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0615 19:10:06.744623 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0615 19:10:06.747357 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0615 19:10:06.751538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0615 19:10:06.755921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0615 19:10:06.758454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0615 19:10:06.760786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0615 19:10:06.763221 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0615 19:10:06.765403 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0615 19:10:06.765429 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0615 19:10:06.765438 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0615 19:10:06.765513 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0615 19:10:06.765518 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0615 19:10:06.767638 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0615 19:10:06.769411 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0615 19:10:06.773560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0615 19:10:06.777599 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0615 19:10:06.780118 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0615 19:10:06.782424 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0615 19:10:06.782500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0615 19:10:06.784306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0615 19:10:06.786129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0615 19:10:06.788451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0615 19:10:06.790798 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0615 19:10:06.794971 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:10:06.794981 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:10:06.795538 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:10:06.815330 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:10:06.837428 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:10:06.847097 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:10:06.865779 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:10:06.881127 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:10:06.896406 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:10:06.902010 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:10:18.905902 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-15 19:10:18.905883561 +0000 UTC m=+12.225550526 I0615 19:10:19.663328 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:10:19.663404 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 19:10:19.663393471 +0000 UTC m=+12.983060366 I0615 19:10:19.663452 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-15 19:10:19.663435302 +0000 UTC m=+12.983102197 E0615 19:10:19.679186 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 19:10:19.679248 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-15 19:10:19.679241775 +0000 UTC m=+12.998908650 E0615 19:10:19.679276 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 19:10:19.682150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:10:19.682194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:10:19.682207 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 19:10:19.682202712 +0000 UTC m=+13.001869587 E0615 19:10:19.693280 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0615 19:10:19.693990 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 19:10:19.694041 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 19:10:19.694088 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0615 19:10:19.733706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vzzqd" condition "Approved" to 2026-06-15 19:10:19.733695781 +0000 UTC m=+13.053362656 I0615 19:10:19.744426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vzzqd" condition "Ready" to 2026-06-15 19:10:19.74441667 +0000 UTC m=+13.064083545 I0615 19:10:19.768863 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:10:19.768848426 +0000 UTC m=+13.088515311 I0615 19:10:19.792191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:10:19.832021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:10:24.693854 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:10:24.693840947 +0000 UTC m=+18.013507842 I0615 19:10:48.189864 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-15 19:10:48.189836762 +0000 UTC m=+41.509503637 I0615 19:10:48.190395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:10:48.190511 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 19:10:48.190503334 +0000 UTC m=+41.510170209 I0615 19:10:48.205875 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-15 19:10:48.205865417 +0000 UTC m=+41.525532292 I0615 19:10:48.218560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:10:48.218819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:10:48.218886 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 19:10:48.218863739 +0000 UTC m=+41.538530604 I0615 19:10:48.480144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:10:48.486300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mbqzh" condition "Approved" to 2026-06-15 19:10:48.486274056 +0000 UTC m=+41.805940941 I0615 19:10:48.512779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mbqzh" condition "Ready" to 2026-06-15 19:10:48.512767 +0000 UTC m=+41.832433875 I0615 19:10:48.548116 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:10:48.548103165 +0000 UTC m=+41.867770040 I0615 19:10:48.575977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:10:48.576225 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:10:48.576220136 +0000 UTC m=+41.895887001 I0615 19:10:48.580334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:10:48.596742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:14:45.655945 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:14:45.656013 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-06-15 19:14:45.655999701 +0000 UTC m=+278.975666576 I0615 19:14:45.656444 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-06-15 19:14:45.656432022 +0000 UTC m=+278.976098897 I0615 19:14:45.672178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:14:45.672221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:14:45.672232 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-06-15 19:14:45.67222796 +0000 UTC m=+278.991894825 I0615 19:14:46.104477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-l569q" condition "Approved" to 2026-06-15 19:14:46.104459859 +0000 UTC m=+279.424126754 I0615 19:14:46.139692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-l569q" condition "Ready" to 2026-06-15 19:14:46.13967011 +0000 UTC m=+279.459336985 I0615 19:14:46.174657 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:14:46.174601093 +0000 UTC m=+279.494267978 I0615 19:14:46.192833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:14:46.193269 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:14:46.193258109 +0000 UTC m=+279.512924984 I0615 19:14:46.210418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:15:51.665047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:15:51.665168 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-15 19:15:51.665129808 +0000 UTC m=+344.984796723 I0615 19:15:51.665308 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 19:15:51.664973075 +0000 UTC m=+344.984639970 E0615 19:15:51.683192 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 19:15:51.683265 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-15 19:15:51.683250293 +0000 UTC m=+345.002917188 E0615 19:15:51.683352 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 19:15:51.688914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:15:51.689832 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 19:15:51.689819394 +0000 UTC m=+345.009486309 E0615 19:15:51.698679 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0615 19:15:51.699135 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 19:15:51.699240 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 19:15:51.699370 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0615 19:15:51.719776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:15:51.719846 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 19:15:51.719838489 +0000 UTC m=+345.039505364 I0615 19:15:51.723114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:15:51.727002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-d89q7" condition "Approved" to 2026-06-15 19:15:51.726988791 +0000 UTC m=+345.046655666 I0615 19:15:51.729923 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 19:15:51.729914795 +0000 UTC m=+345.049581650 I0615 19:15:51.737586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:15:51.738504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-d89q7" condition "Ready" to 2026-06-15 19:15:51.738457533 +0000 UTC m=+345.058124438 I0615 19:15:51.760557 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:15:51.76053635 +0000 UTC m=+345.080203225 I0615 19:15:51.778330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:15:56.699518 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:15:56.699504053 +0000 UTC m=+350.019170948 I0615 19:16:38.630751 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:16:38.630806 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-15 19:16:38.630762236 +0000 UTC m=+391.950429111 I0615 19:16:38.631074 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-15 19:16:38.630781376 +0000 UTC m=+391.950448231 I0615 19:16:38.634249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:16:38.634277 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-15 19:16:38.634271731 +0000 UTC m=+391.953938606 I0615 19:16:38.634534 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-15 19:16:38.634529586 +0000 UTC m=+391.954196461 I0615 19:16:38.634870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:16:38.634837 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-15 19:16:38.63481328 +0000 UTC m=+391.954480145 I0615 19:16:38.634892 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-15 19:16:38.634888031 +0000 UTC m=+391.954554916 I0615 19:16:38.682065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:38.682129 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-15 19:16:38.682123496 +0000 UTC m=+392.001790361 I0615 19:16:38.704958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:38.705079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:38.705157 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-15 19:16:38.705148543 +0000 UTC m=+392.024815418 I0615 19:16:38.706212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:16:38.706326 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-15 19:16:38.706308992 +0000 UTC m=+392.025975857 I0615 19:16:39.008201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:39.040268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cgrrh" condition "Approved" to 2026-06-15 19:16:39.040258574 +0000 UTC m=+392.359925439 I0615 19:16:39.060553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cgrrh" condition "Ready" to 2026-06-15 19:16:39.060544187 +0000 UTC m=+392.380211052 I0615 19:16:39.100658 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:16:39.100646365 +0000 UTC m=+392.420313240 I0615 19:16:39.129661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:39.136075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:39.136425 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:16:39.136408445 +0000 UTC m=+392.456075320 I0615 19:16:39.162581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wjzdr" condition "Approved" to 2026-06-15 19:16:39.162571951 +0000 UTC m=+392.482238816 I0615 19:16:39.165545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:39.165876 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:16:39.165869015 +0000 UTC m=+392.485535880 I0615 19:16:39.193653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wjzdr" condition "Ready" to 2026-06-15 19:16:39.193640776 +0000 UTC m=+392.513307631 I0615 19:16:39.238329 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:16:39.238315468 +0000 UTC m=+392.557982333 I0615 19:16:39.271230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:39.377782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:39.590252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zvjjp" condition "Approved" to 2026-06-15 19:16:39.590238843 +0000 UTC m=+392.909905718 I0615 19:16:39.856797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zvjjp" condition "Ready" to 2026-06-15 19:16:39.856787529 +0000 UTC m=+393.176454384 I0615 19:16:40.121081 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:16:40.121064634 +0000 UTC m=+393.440731539 I0615 19:16:40.220770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:40.221178 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:16:40.221171453 +0000 UTC m=+393.540838328 I0615 19:16:40.419314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:46.233153 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" condition "Ready" to 2026-06-15 19:16:46.233107837 +0000 UTC m=+399.552774742 I0615 19:16:46.233294 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:16:46.233364 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" condition "Issuing" to 2026-06-15 19:16:46.233349061 +0000 UTC m=+399.553015936 I0615 19:16:46.249792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tzb96-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:46.249867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:16:46.249895 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" condition "Issuing" to 2026-06-15 19:16:46.249885689 +0000 UTC m=+399.569552574 I0615 19:16:46.436299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tzb96-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:46.444634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tzb96-s5jtz" condition "Approved" to 2026-06-15 19:16:46.444620513 +0000 UTC m=+399.764287368 I0615 19:16:46.462887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tzb96-s5jtz" condition "Ready" to 2026-06-15 19:16:46.462878248 +0000 UTC m=+399.782545113 I0615 19:16:46.496727 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:16:46.496714447 +0000 UTC m=+399.816381322 I0615 19:16:46.519072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tzb96-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:46.519547 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:16:46.519537995 +0000 UTC m=+399.839204870 I0615 19:16:46.535685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tzb96-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tzb96-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:59.144161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:16:59.144226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-15 19:16:59.144215285 +0000 UTC m=+412.463882180 I0615 19:16:59.144160 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-15 19:16:59.144145104 +0000 UTC m=+412.463811969 I0615 19:16:59.163981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:59.164072 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:16:59.164095 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-15 19:16:59.164088805 +0000 UTC m=+412.483755680 I0615 19:16:59.464050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-f9pw2" condition "Approved" to 2026-06-15 19:16:59.46403647 +0000 UTC m=+412.783703355 I0615 19:16:59.491963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-f9pw2" condition "Ready" to 2026-06-15 19:16:59.491951682 +0000 UTC m=+412.811618557 I0615 19:16:59.533677 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:16:59.533649713 +0000 UTC m=+412.853316608 I0615 19:16:59.556238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:16:59.556480 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:16:59.556471638 +0000 UTC m=+412.876138513 I0615 19:16:59.581172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:20:14.356017 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-15 19:20:14.356003477 +0000 UTC m=+607.675670352 I0615 19:20:14.356140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:20:14.356192 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-15 19:20:14.356180209 +0000 UTC m=+607.675847104 I0615 19:20:14.373976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:20:14.374091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:20:14.374123 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-15 19:20:14.374115264 +0000 UTC m=+607.693782139 I0615 19:20:14.545213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:20:14.554223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9t945" condition "Approved" to 2026-06-15 19:20:14.554211117 +0000 UTC m=+607.873877992 I0615 19:20:14.577357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9t945" condition "Ready" to 2026-06-15 19:20:14.57734526 +0000 UTC m=+607.897012145 I0615 19:20:14.609832 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:20:14.60981802 +0000 UTC m=+607.929484895 I0615 19:20:14.632663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:20:56.691156 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-15 19:20:56.691143263 +0000 UTC m=+650.010810158 I0615 19:20:56.691217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:20:56.691845 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 19:20:56.691837301 +0000 UTC m=+650.011504206 I0615 19:20:56.707081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:20:56.707394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:20:56.707528 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 19:20:56.707518435 +0000 UTC m=+650.027185330 I0615 19:20:56.907447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-922ls" condition "Approved" to 2026-06-15 19:20:56.907433725 +0000 UTC m=+650.227100600 I0615 19:20:56.926469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-922ls" condition "Ready" to 2026-06-15 19:20:56.926457477 +0000 UTC m=+650.246124342 I0615 19:20:56.954291 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:20:56.954277686 +0000 UTC m=+650.273944551 I0615 19:20:56.975820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:20:57.024057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"