I0630 08:20:26.801188 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0630 08:20:26.801344 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0630 08:20:26.804550 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0630 08:20:26.804572 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0630 08:20:26.804581 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0630 08:20:26.804912 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0630 08:20:26.804972 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0630 08:20:26.804988 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0630 08:20:26.807298 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0630 08:20:26.819897 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0630 08:20:26.825491 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0630 08:20:26.828703 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0630 08:20:26.828734 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0630 08:20:26.828839 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0630 08:20:26.831711 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0630 08:20:26.834242 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0630 08:20:26.836387 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0630 08:20:26.839756 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0630 08:20:26.843988 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0630 08:20:26.844017 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0630 08:20:26.844119 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0630 08:20:26.847651 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0630 08:20:26.849327 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0630 08:20:26.850952 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0630 08:20:26.852572 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0630 08:20:26.854497 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0630 08:20:26.857950 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0630 08:20:26.861688 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0630 08:20:26.864664 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0630 08:20:26.867579 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0630 08:20:26.870155 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0630 08:20:26.870236 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0630 08:20:26.872988 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0630 08:20:26.873052 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0630 08:20:26.875616 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:26.876181 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:26.876185 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:26.876394 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:26.877183 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:26.892515 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:26.912068 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:26.928821 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:26.946221 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:26.960561 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:26.983008 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0630 08:20:39.866589 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-30 08:20:39.86655878 +0000 UTC m=+13.089708255 I0630 08:20:40.635588 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:20:40.635631 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-30 08:20:40.635620758 +0000 UTC m=+13.858770233 I0630 08:20:40.649553 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 08:20:40.649528367 +0000 UTC m=+13.872677852 E0630 08:20:40.665503 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 08:20:40.665574 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-30 08:20:40.66556568 +0000 UTC m=+13.888715155 E0630 08:20:40.665601 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 08:20:40.671440 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:20:40.671512 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 08:20:40.671506395 +0000 UTC m=+13.894655880 E0630 08:20:40.672614 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0630 08:20:40.672895 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 08:20:40.673196 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 08:20:40.673308 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0630 08:20:40.686366 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:20:40.718065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-30 08:20:40.71804748 +0000 UTC m=+13.941196985 I0630 08:20:40.739891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-30 08:20:40.739875765 +0000 UTC m=+13.963025280 I0630 08:20:40.769388 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:20:40.769368678 +0000 UTC m=+13.992518193 I0630 08:20:40.780665 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:20:40.781130 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:20:40.781119866 +0000 UTC m=+14.004269381 I0630 08:20:40.791731 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:20:45.673635 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:20:45.673622997 +0000 UTC m=+18.896772512 I0630 08:21:08.888701 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-30 08:21:08.888667181 +0000 UTC m=+42.111816666 I0630 08:21:08.888716 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:21:08.889063 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-30 08:21:08.889058008 +0000 UTC m=+42.112207493 I0630 08:21:08.897020 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-30 08:21:08.897002665 +0000 UTC m=+42.120152140 I0630 08:21:08.901321 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:21:08.901428 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-30 08:21:08.901419147 +0000 UTC m=+42.124568632 I0630 08:21:09.444952 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:21:09.479172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-30 08:21:09.479160346 +0000 UTC m=+42.702309831 I0630 08:21:09.502419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-30 08:21:09.502405228 +0000 UTC m=+42.725554733 I0630 08:21:09.526873 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:21:09.526860898 +0000 UTC m=+42.750010383 I0630 08:21:09.540206 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:21:09.540935 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:21:09.540926173 +0000 UTC m=+42.764075658 I0630 08:21:09.551613 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:25:11.471699 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-06-30 08:25:11.471675802 +0000 UTC m=+284.694825277 I0630 08:25:11.471964 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:25:11.472042 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-06-30 08:25:11.472018649 +0000 UTC m=+284.695168164 I0630 08:25:11.484092 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:25:11.484174 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:25:11.484252 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-06-30 08:25:11.484243256 +0000 UTC m=+284.707392741 I0630 08:25:11.608180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-1" condition "Approved" to 2026-06-30 08:25:11.608169045 +0000 UTC m=+284.831318520 I0630 08:25:11.623209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-1" condition "Ready" to 2026-06-30 08:25:11.623197658 +0000 UTC m=+284.846347133 I0630 08:25:11.640836 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:25:11.640811354 +0000 UTC m=+284.863960839 I0630 08:25:11.651746 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:25:11.653361 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:25:11.653343707 +0000 UTC m=+284.876493212 I0630 08:25:11.659653 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:25:11.667555 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:26:17.115536 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-30 08:26:17.115511266 +0000 UTC m=+350.338660741 I0630 08:26:17.115818 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:26:17.115872 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-30 08:26:17.115867161 +0000 UTC m=+350.339016646 I0630 08:26:17.126907 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:26:17.126997 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-30 08:26:17.126989009 +0000 UTC m=+350.350138484 E0630 08:26:17.127197 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 08:26:17.127249 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-30 08:26:17.127242393 +0000 UTC m=+350.350391868 E0630 08:26:17.127286 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 08:26:17.136300 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0630 08:26:17.136454 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 08:26:17.136513 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 08:26:17.136591 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0630 08:26:17.139803 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:26:17.159539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-30 08:26:17.159521477 +0000 UTC m=+350.382670952 I0630 08:26:17.173579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-30 08:26:17.173568004 +0000 UTC m=+350.396717479 I0630 08:26:17.193043 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:26:17.193035483 +0000 UTC m=+350.416184968 I0630 08:26:17.208287 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:26:17.208692 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:26:17.208682096 +0000 UTC m=+350.431831581 I0630 08:26:17.225697 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:26:22.137509 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:26:22.137496677 +0000 UTC m=+355.360646152 I0630 08:27:03.537179 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-30 08:27:03.537141839 +0000 UTC m=+396.760291324 I0630 08:27:03.537487 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:27:03.537521 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-30 08:27:03.537514114 +0000 UTC m=+396.760663589 I0630 08:27:03.571361 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:03.571851 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-30 08:27:03.571841713 +0000 UTC m=+396.794991178 I0630 08:27:03.572060 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-30 08:27:03.572057226 +0000 UTC m=+396.795206691 I0630 08:27:03.572210 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:27:03.572225 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-30 08:27:03.572222189 +0000 UTC m=+396.795371664 I0630 08:27:03.572414 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-30 08:27:03.572411471 +0000 UTC m=+396.795560936 I0630 08:27:03.572527 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:27:03.572540 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-30 08:27:03.572537433 +0000 UTC m=+396.795686908 I0630 08:27:03.591725 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:03.591795 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-30 08:27:03.59179003 +0000 UTC m=+396.814939495 I0630 08:27:03.601147 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:03.601932 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-30 08:27:03.601923726 +0000 UTC m=+396.825073201 I0630 08:27:03.777197 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:03.804798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-30 08:27:03.804786069 +0000 UTC m=+397.027935544 I0630 08:27:03.845484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-30 08:27:03.845473715 +0000 UTC m=+397.068623180 I0630 08:27:03.848987 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:03.871205 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:27:03.871196812 +0000 UTC m=+397.094346277 I0630 08:27:03.882591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-30 08:27:03.882585307 +0000 UTC m=+397.105734772 I0630 08:27:03.896038 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:03.904091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-30 08:27:03.904078597 +0000 UTC m=+397.127228072 I0630 08:27:03.927438 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:27:03.927430097 +0000 UTC m=+397.150579562 I0630 08:27:03.980172 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:03.981102 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:27:03.981090163 +0000 UTC m=+397.204239668 I0630 08:27:04.026793 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:04.286808 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:04.328554 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:04.543660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-30 08:27:04.543646559 +0000 UTC m=+397.766796044 I0630 08:27:04.640348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-30 08:27:04.640311114 +0000 UTC m=+397.863460629 I0630 08:27:05.087665 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:27:05.087647457 +0000 UTC m=+398.310796972 I0630 08:27:05.176725 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:05.177387 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:27:05.177376544 +0000 UTC m=+398.400526029 I0630 08:27:05.427033 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:05.476093 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:14.735025 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls" condition "Ready" to 2026-06-30 08:27:14.735005101 +0000 UTC m=+407.958154576 I0630 08:27:14.735413 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:27:14.735432 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls" condition "Issuing" to 2026-06-30 08:27:14.735428097 +0000 UTC m=+407.958577572 I0630 08:27:14.748766 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:14.748922 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:27:14.748958 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls" condition "Issuing" to 2026-06-30 08:27:14.748948172 +0000 UTC m=+407.972097647 I0630 08:27:15.149870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls-1" condition "Approved" to 2026-06-30 08:27:15.149854398 +0000 UTC m=+408.373003883 I0630 08:27:15.175063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls-1" condition "Ready" to 2026-06-30 08:27:15.175054318 +0000 UTC m=+408.398203783 I0630 08:27:15.215523 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:27:15.215513678 +0000 UTC m=+408.438663153 I0630 08:27:15.231076 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:15.231925 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:27:15.231902476 +0000 UTC m=+408.455051961 I0630 08:27:15.249487 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gwlrx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:27.103658 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:27:27.103675 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-30 08:27:27.103658244 +0000 UTC m=+420.326807729 I0630 08:27:27.103699 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-30 08:27:27.103691424 +0000 UTC m=+420.326840899 I0630 08:27:27.115817 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:27.115983 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-30 08:27:27.115976426 +0000 UTC m=+420.339125911 I0630 08:27:27.338862 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:27.361074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-30 08:27:27.361061146 +0000 UTC m=+420.584210621 I0630 08:27:27.376025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-30 08:27:27.376015777 +0000 UTC m=+420.599165262 I0630 08:27:27.400261 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:27:27.400246917 +0000 UTC m=+420.623396402 I0630 08:27:27.416018 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:27:27.449728 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:30:41.349684 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:30:41.349761 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-30 08:30:41.349750597 +0000 UTC m=+614.572900112 I0630 08:30:41.349987 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-30 08:30:41.34997297 +0000 UTC m=+614.573122475 I0630 08:30:41.360231 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:30:41.360285 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:30:41.360304 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-30 08:30:41.36029927 +0000 UTC m=+614.583448755 I0630 08:30:41.463595 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:30:41.478790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-30 08:30:41.478778205 +0000 UTC m=+614.701927670 I0630 08:30:41.494241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-30 08:30:41.494230779 +0000 UTC m=+614.717380254 I0630 08:30:41.512655 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:30:41.512644941 +0000 UTC m=+614.735794406 I0630 08:30:41.526419 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:30:41.526975 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:30:41.526967792 +0000 UTC m=+614.750117277 I0630 08:30:41.539176 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:30:41.540878 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:31:22.554377 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 08:31:22.554440 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-30 08:31:22.554433519 +0000 UTC m=+655.777582994 I0630 08:31:22.557631 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-30 08:31:22.557613838 +0000 UTC m=+655.780763373 I0630 08:31:22.571810 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:31:22.572041 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-30 08:31:22.572029898 +0000 UTC m=+655.795179383 I0630 08:31:22.671836 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 08:31:22.694860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-30 08:31:22.694845796 +0000 UTC m=+655.917995301 I0630 08:31:22.716785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-30 08:31:22.716775009 +0000 UTC m=+655.939924494 I0630 08:31:22.741052 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 08:31:22.741039751 +0000 UTC m=+655.964189226 I0630 08:31:22.754380 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"