I0624 11:01:44.888771 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0624 11:01:44.888871 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0624 11:01:44.888948 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0624 11:01:44.894832 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0624 11:01:44.895359 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0624 11:01:44.895520 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0624 11:01:44.895718 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0624 11:01:44.900013 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0624 11:01:44.918877 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0624 11:01:44.922266 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0624 11:01:44.925010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0624 11:01:44.928125 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0624 11:01:44.932599 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0624 11:01:44.935289 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0624 11:01:44.937928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0624 11:01:44.941480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0624 11:01:44.945614 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0624 11:01:44.945718 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0624 11:01:44.950109 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0624 11:01:44.950132 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0624 11:01:44.953072 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0624 11:01:44.953090 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0624 11:01:44.953096 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0624 11:01:44.953205 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0624 11:01:44.960946 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0624 11:01:44.964138 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0624 11:01:44.967160 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0624 11:01:44.970189 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0624 11:01:44.972442 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0624 11:01:44.974911 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0624 11:01:44.975042 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0624 11:01:44.977519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0624 11:01:44.982824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0624 11:01:44.987821 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:01:44.988662 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:01:44.988861 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:01:44.990411 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:01:45.000451 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:01:45.016278 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:01:45.030392 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:01:45.045146 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:01:45.059854 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:01:45.079849 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:01:58.012448 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-24 11:01:58.012414513 +0000 UTC m=+13.151341169 I0624 11:01:58.691654 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:01:58.691717 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 11:01:58.691709376 +0000 UTC m=+13.830636012 I0624 11:01:58.691689 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-24 11:01:58.691674756 +0000 UTC m=+13.830601412 E0624 11:01:58.704772 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 11:01:58.704832 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-24 11:01:58.704826386 +0000 UTC m=+13.843753022 E0624 11:01:58.704853 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 11:01:58.709427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:01:58.709618 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:01:58.709644 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 11:01:58.709636392 +0000 UTC m=+13.848563028 E0624 11:01:58.721208 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0624 11:01:58.721356 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 11:01:58.721429 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 11:01:58.721596 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0624 11:01:58.756290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9vkzx" condition "Approved" to 2026-06-24 11:01:58.756275997 +0000 UTC m=+13.895202663 I0624 11:01:58.769069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9vkzx" condition "Ready" to 2026-06-24 11:01:58.76905961 +0000 UTC m=+13.907986246 I0624 11:01:58.799712 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:01:58.799699108 +0000 UTC m=+13.938625744 I0624 11:01:58.818354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:01:58.818816 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:01:58.818805297 +0000 UTC m=+13.957731963 I0624 11:01:58.831906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:01:58.832332 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:01:58.832320515 +0000 UTC m=+13.971247171 I0624 11:02:03.721691 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:02:03.7216738 +0000 UTC m=+18.860600466 I0624 11:02:25.686324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:02:25.686407 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 11:02:25.686397281 +0000 UTC m=+40.825323917 I0624 11:02:25.686624 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 11:02:25.686613434 +0000 UTC m=+40.825540080 I0624 11:02:25.715958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:02:25.717175 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 11:02:25.717167745 +0000 UTC m=+40.856094371 I0624 11:02:25.711947 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-24 11:02:25.711932322 +0000 UTC m=+40.850858948 I0624 11:02:26.251423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:02:26.287207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4hhf9" condition "Approved" to 2026-06-24 11:02:26.287198412 +0000 UTC m=+41.426125038 I0624 11:02:26.319747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4hhf9" condition "Ready" to 2026-06-24 11:02:26.319731855 +0000 UTC m=+41.458658501 I0624 11:02:26.353598 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:02:26.353588491 +0000 UTC m=+41.492515117 I0624 11:02:26.383359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:02:26.383852 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:02:26.383832554 +0000 UTC m=+41.522759190 I0624 11:02:26.385456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:02:26.399262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:02:26.403196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:02:26.403752 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:02:26.403740395 +0000 UTC m=+41.542667051 I0624 11:06:35.606756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-130.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:06:35.606803 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-130.nip.io-tls" condition "Issuing" to 2026-06-24 11:06:35.606792452 +0000 UTC m=+290.745719118 I0624 11:06:35.608364 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-130.nip.io-tls" condition "Ready" to 2026-06-24 11:06:35.606294843 +0000 UTC m=+290.745221479 I0624 11:06:35.632013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-130.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-130.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:06:35.632086 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-130.nip.io-tls" condition "Ready" to 2026-06-24 11:06:35.632076123 +0000 UTC m=+290.771002789 I0624 11:06:35.711512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-130.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-130.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:06:35.738849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-130.nip.io-tls-6s8n8" condition "Approved" to 2026-06-24 11:06:35.738835767 +0000 UTC m=+290.877762433 I0624 11:06:35.768837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-130.nip.io-tls-6s8n8" condition "Ready" to 2026-06-24 11:06:35.768825882 +0000 UTC m=+290.907752518 I0624 11:06:35.793523 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-130.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:06:35.793514903 +0000 UTC m=+290.932441539 I0624 11:06:35.813098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-130.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-130.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:39.692304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:07:39.692341 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-24 11:07:39.692318531 +0000 UTC m=+354.831245187 I0624 11:07:39.692350 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 11:07:39.692338031 +0000 UTC m=+354.831264697 E0624 11:07:39.707147 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 11:07:39.707232 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-24 11:07:39.707224946 +0000 UTC m=+354.846151572 E0624 11:07:39.707252 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 11:07:39.709998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:39.710342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:07:39.710495 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 11:07:39.710376628 +0000 UTC m=+354.849303264 E0624 11:07:39.718131 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0624 11:07:39.718242 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 11:07:39.718283 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 11:07:39.718337 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0624 11:07:39.763950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:39.796976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mhjnl" condition "Approved" to 2026-06-24 11:07:39.796958733 +0000 UTC m=+354.935885359 I0624 11:07:39.816649 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mhjnl" condition "Ready" to 2026-06-24 11:07:39.816635977 +0000 UTC m=+354.955562603 I0624 11:07:39.841381 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:39.841365415 +0000 UTC m=+354.980292051 I0624 11:07:39.857925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:39.858239 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:39.858228092 +0000 UTC m=+354.997154728 I0624 11:07:39.871184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:39.872526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:44.718653 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:44.718632541 +0000 UTC m=+359.857559207 I0624 11:08:25.878676 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 11:08:25.878665286 +0000 UTC m=+401.017591962 I0624 11:08:25.887934 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:08:25.888038 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 11:08:25.888020333 +0000 UTC m=+401.026947149 I0624 11:08:25.890546 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:08:25.890572 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 11:08:25.890566204 +0000 UTC m=+401.029492820 I0624 11:08:25.891180 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 11:08:25.891175603 +0000 UTC m=+401.030102229 I0624 11:08:25.891270 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:08:25.891282 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 11:08:25.891279985 +0000 UTC m=+401.030206611 I0624 11:08:25.891363 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 11:08:25.891360346 +0000 UTC m=+401.030286972 I0624 11:08:25.934030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:25.934089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:25.934133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:08:25.934154 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 11:08:25.934148974 +0000 UTC m=+401.073075590 I0624 11:08:25.934290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:08:25.934353 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 11:08:25.934320077 +0000 UTC m=+401.073246713 I0624 11:08:25.935102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:25.935131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:08:25.935145 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 11:08:25.93514255 +0000 UTC m=+401.074069166 I0624 11:08:26.094776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2qxr6" condition "Approved" to 2026-06-24 11:08:26.094762676 +0000 UTC m=+401.233689302 I0624 11:08:26.125384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2qxr6" condition "Ready" to 2026-06-24 11:08:26.125365939 +0000 UTC m=+401.264292575 I0624 11:08:26.218788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:26.234450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q2bvw" condition "Approved" to 2026-06-24 11:08:26.234438985 +0000 UTC m=+401.373365621 I0624 11:08:26.235191 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:08:26.235179496 +0000 UTC m=+401.374106122 I0624 11:08:26.241827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-89q2m" condition "Approved" to 2026-06-24 11:08:26.241815231 +0000 UTC m=+401.380741857 I0624 11:08:26.268544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q2bvw" condition "Ready" to 2026-06-24 11:08:26.268532474 +0000 UTC m=+401.407459110 I0624 11:08:26.270672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-89q2m" condition "Ready" to 2026-06-24 11:08:26.270666418 +0000 UTC m=+401.409593054 I0624 11:08:26.273177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:26.273464 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:08:26.273458902 +0000 UTC m=+401.412385528 I0624 11:08:26.621938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:26.720439 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:08:26.720413812 +0000 UTC m=+401.859340438 I0624 11:08:26.765307 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:08:26.765294702 +0000 UTC m=+401.904221328 I0624 11:08:26.964494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:27.073778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:27.074009 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:08:27.074002865 +0000 UTC m=+402.212929491 I0624 11:08:27.420475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:34.858863 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls" condition "Ready" to 2026-06-24 11:08:34.858822509 +0000 UTC m=+409.997749145 I0624 11:08:34.859112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:08:34.859138 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls" condition "Issuing" to 2026-06-24 11:08:34.859133124 +0000 UTC m=+409.998059770 I0624 11:08:34.877815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:34.877893 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls" condition "Ready" to 2026-06-24 11:08:34.877884678 +0000 UTC m=+410.016811314 I0624 11:08:34.989854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:35.027722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lvj2n-84qq7" condition "Approved" to 2026-06-24 11:08:35.027699825 +0000 UTC m=+410.166626451 I0624 11:08:35.041956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lvj2n-84qq7" condition "Ready" to 2026-06-24 11:08:35.041945079 +0000 UTC m=+410.180871715 I0624 11:08:35.072470 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:08:35.072455349 +0000 UTC m=+410.211381975 I0624 11:08:35.090804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lvj2n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:48.489494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:08:48.489533 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 11:08:48.489525119 +0000 UTC m=+423.628451755 I0624 11:08:48.489708 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-24 11:08:48.489690562 +0000 UTC m=+423.628617198 I0624 11:08:48.504440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:48.504507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:08:48.504527 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 11:08:48.504521193 +0000 UTC m=+423.643447829 I0624 11:08:48.650434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gb99f" condition "Approved" to 2026-06-24 11:08:48.650423358 +0000 UTC m=+423.789349984 I0624 11:08:48.672167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gb99f" condition "Ready" to 2026-06-24 11:08:48.672152296 +0000 UTC m=+423.811078962 I0624 11:08:48.727510 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:08:48.727498379 +0000 UTC m=+423.866425005 I0624 11:08:48.751906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:48.752251 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:08:48.752243695 +0000 UTC m=+423.891170321 I0624 11:08:48.760367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:08:48.777022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:12:11.629850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:12:11.629892 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 11:12:11.629880237 +0000 UTC m=+626.768806893 I0624 11:12:11.630239 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 11:12:11.630223323 +0000 UTC m=+626.769149969 I0624 11:12:11.646165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:12:11.646243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:12:11.646258 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 11:12:11.646253017 +0000 UTC m=+626.785179653 I0624 11:12:11.827571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tc2ch" condition "Approved" to 2026-06-24 11:12:11.827553907 +0000 UTC m=+626.966480563 I0624 11:12:11.852721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tc2ch" condition "Ready" to 2026-06-24 11:12:11.852710684 +0000 UTC m=+626.991637310 I0624 11:12:11.884168 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:12:11.884148583 +0000 UTC m=+627.023075219 I0624 11:12:11.909467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:12:11.910001 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:12:11.909993481 +0000 UTC m=+627.048920107 I0624 11:12:11.922557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:12:11.932569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:12:52.117939 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-24 11:12:52.117902637 +0000 UTC m=+667.256829273 I0624 11:12:52.118715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:12:52.119348 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 11:12:52.119342149 +0000 UTC m=+667.258268785 I0624 11:12:52.136030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:12:52.136202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:12:52.136273 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 11:12:52.136238474 +0000 UTC m=+667.275165110 I0624 11:12:52.398707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-b5hzv" condition "Approved" to 2026-06-24 11:12:52.398692142 +0000 UTC m=+667.537618788 I0624 11:12:52.425969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-b5hzv" condition "Ready" to 2026-06-24 11:12:52.425945808 +0000 UTC m=+667.564872474 I0624 11:12:52.463010 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:12:52.462994848 +0000 UTC m=+667.601921484 I0624 11:12:52.489281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:12:52.489646 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:12:52.489637545 +0000 UTC m=+667.628564171 I0624 11:12:52.517990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:12:52.518420 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:12:52.518413343 +0000 UTC m=+667.657339969