I0616 00:57:48.149748 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0616 00:57:48.149819 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0616 00:57:48.149862 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0616 00:57:48.152022 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0616 00:57:48.152347 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0616 00:57:48.152453 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0616 00:57:48.152472 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0616 00:57:48.154207 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0616 00:57:48.166576 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0616 00:57:48.174212 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0616 00:57:48.178348 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0616 00:57:48.180971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0616 00:57:48.183382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0616 00:57:48.185913 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0616 00:57:48.185951 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0616 00:57:48.186068 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0616 00:57:48.188861 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0616 00:57:48.192150 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0616 00:57:48.193108 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0616 00:57:48.196985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0616 00:57:48.201667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0616 00:57:48.206130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0616 00:57:48.208440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0616 00:57:48.211139 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0616 00:57:48.213602 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0616 00:57:48.213625 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0616 00:57:48.213742 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0616 00:57:48.215977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0616 00:57:48.218432 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0616 00:57:48.222982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0616 00:57:48.225518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0616 00:57:48.227852 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0616 00:57:48.227904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0616 00:57:48.230468 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:57:48.231211 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:57:48.231637 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:57:48.232830 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:57:48.251464 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:57:48.266701 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:57:48.280117 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:57:48.297264 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:57:48.309115 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:57:48.312534 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 00:58:07.165668 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-16 00:58:07.165646428 +0000 UTC m=+19.048438216 I0616 00:58:07.858882 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-16 00:58:07.858866288 +0000 UTC m=+19.741658076 I0616 00:58:07.859073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 00:58:07.859283 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-16 00:58:07.859268033 +0000 UTC m=+19.742059881 E0616 00:58:07.874036 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 00:58:07.874166 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-16 00:58:07.874155167 +0000 UTC m=+19.756946925 E0616 00:58:07.874334 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 00:58:07.876245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:58:07.876292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 00:58:07.876304 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-16 00:58:07.876300273 +0000 UTC m=+19.759092031 E0616 00:58:07.885935 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0616 00:58:07.887545 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 00:58:07.887760 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 00:58:07.888300 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0616 00:58:07.915522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:58:07.923132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b67gr" condition "Approved" to 2026-06-16 00:58:07.923121329 +0000 UTC m=+19.805913077 I0616 00:58:07.946318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b67gr" condition "Ready" to 2026-06-16 00:58:07.946301392 +0000 UTC m=+19.829093240 I0616 00:58:07.967975 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:58:07.967959726 +0000 UTC m=+19.850751514 I0616 00:58:07.984684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:58:12.886448 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:58:12.886437917 +0000 UTC m=+24.769229675 I0616 00:58:36.218424 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-16 00:58:36.218386399 +0000 UTC m=+48.101178177 I0616 00:58:36.218858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 00:58:36.218899 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-16 00:58:36.218891702 +0000 UTC m=+48.101683460 I0616 00:58:36.228319 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-16 00:58:36.228303932 +0000 UTC m=+48.111095720 I0616 00:58:36.255966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:58:36.256042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 00:58:36.256075 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-16 00:58:36.256069928 +0000 UTC m=+48.138861676 I0616 00:58:36.680288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 00:58:36.685826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pnqvg" condition "Approved" to 2026-06-16 00:58:36.685811537 +0000 UTC m=+48.568603305 I0616 00:58:36.719548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pnqvg" condition "Ready" to 2026-06-16 00:58:36.719533409 +0000 UTC m=+48.602325177 I0616 00:58:36.752523 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 00:58:36.752509918 +0000 UTC m=+48.635301676 I0616 00:58:36.779380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:03:37.597521 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-246.nip.io-tls" condition "Ready" to 2026-06-16 01:03:37.597424771 +0000 UTC m=+349.480216559 I0616 01:03:37.598172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:03:37.598272 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-246.nip.io-tls" condition "Issuing" to 2026-06-16 01:03:37.598261958 +0000 UTC m=+349.481053736 I0616 01:03:37.618019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:03:37.618101 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:03:37.618123 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-246.nip.io-tls" condition "Issuing" to 2026-06-16 01:03:37.618116008 +0000 UTC m=+349.500907786 I0616 01:03:37.850893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:03:37.858270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-246.nip.io-tls-g2jhf" condition "Approved" to 2026-06-16 01:03:37.858251611 +0000 UTC m=+349.741043389 I0616 01:03:37.886797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-246.nip.io-tls-g2jhf" condition "Ready" to 2026-06-16 01:03:37.886781072 +0000 UTC m=+349.769572830 I0616 01:03:37.913059 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:03:37.913044641 +0000 UTC m=+349.795836399 I0616 01:03:37.934709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:03:37.935244 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:03:37.935235066 +0000 UTC m=+349.818026824 I0616 01:03:37.955822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:03:37.958131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:03:37.958483 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:03:37.958471795 +0000 UTC m=+349.841263573 I0616 01:04:42.051637 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-16 01:04:42.051428779 +0000 UTC m=+413.934220557 I0616 01:04:42.052082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:04:42.052177 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-16 01:04:42.052164927 +0000 UTC m=+413.934956715 E0616 01:04:42.069188 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 01:04:42.069241 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-16 01:04:42.069235771 +0000 UTC m=+413.952027519 E0616 01:04:42.069258 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 01:04:42.072706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:04:42.072829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:04:42.072863 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-16 01:04:42.072855849 +0000 UTC m=+413.955647607 E0616 01:04:42.078530 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0616 01:04:42.078718 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 01:04:42.078772 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 01:04:42.078841 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0616 01:04:42.111999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:04:42.114692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-828ww" condition "Approved" to 2026-06-16 01:04:42.114674557 +0000 UTC m=+413.997466325 I0616 01:04:42.131387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-828ww" condition "Ready" to 2026-06-16 01:04:42.131370898 +0000 UTC m=+414.014162686 I0616 01:04:42.152962 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:04:42.152949714 +0000 UTC m=+414.035741472 I0616 01:04:42.173727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:04:42.174175 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:04:42.174167345 +0000 UTC m=+414.056959103 I0616 01:04:42.180281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:04:42.197878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:04:47.079616 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:04:47.079605096 +0000 UTC m=+418.962396854 I0616 01:05:29.294450 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-16 01:05:29.294411397 +0000 UTC m=+461.177203145 I0616 01:05:29.294668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:05:29.294699 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-16 01:05:29.294697028 +0000 UTC m=+461.177488776 I0616 01:05:29.295330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:05:29.295345 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-16 01:05:29.295342324 +0000 UTC m=+461.178134072 I0616 01:05:29.295531 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-16 01:05:29.295528462 +0000 UTC m=+461.178320210 I0616 01:05:29.319124 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-16 01:05:29.319107588 +0000 UTC m=+461.201899346 I0616 01:05:29.319356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:05:29.319405 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-16 01:05:29.31939653 +0000 UTC m=+461.202188288 I0616 01:05:29.337194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:29.337269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:05:29.337291 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-16 01:05:29.337284957 +0000 UTC m=+461.220076715 I0616 01:05:29.351121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:29.351648 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:05:29.351692 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-16 01:05:29.351686886 +0000 UTC m=+461.234478624 I0616 01:05:29.368330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:29.368383 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-16 01:05:29.368378006 +0000 UTC m=+461.251169754 I0616 01:05:29.530176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8sb5m" condition "Approved" to 2026-06-16 01:05:29.530159901 +0000 UTC m=+461.412951659 I0616 01:05:29.537130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:29.548416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8sb5m" condition "Ready" to 2026-06-16 01:05:29.548401864 +0000 UTC m=+461.431193612 I0616 01:05:29.558686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jvflw" condition "Approved" to 2026-06-16 01:05:29.558671465 +0000 UTC m=+461.441463213 I0616 01:05:29.580050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6sb6w" condition "Approved" to 2026-06-16 01:05:29.580033223 +0000 UTC m=+461.462824981 I0616 01:05:29.589748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jvflw" condition "Ready" to 2026-06-16 01:05:29.589739543 +0000 UTC m=+461.472531291 I0616 01:05:29.593866 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:05:29.593855518 +0000 UTC m=+461.476647266 I0616 01:05:29.610031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6sb6w" condition "Ready" to 2026-06-16 01:05:29.610015997 +0000 UTC m=+461.492807755 I0616 01:05:29.820253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:29.975067 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:05:29.975042762 +0000 UTC m=+461.857834550 I0616 01:05:30.123141 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:05:30.123131693 +0000 UTC m=+462.005923451 I0616 01:05:30.218278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:30.218795 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:05:30.218784726 +0000 UTC m=+462.101576484 I0616 01:05:30.398694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:30.399530 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:05:30.399516731 +0000 UTC m=+462.282308519 I0616 01:05:30.722822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:30.875859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:31.022292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:38.306347 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls" condition "Ready" to 2026-06-16 01:05:38.306329998 +0000 UTC m=+470.189121766 I0616 01:05:38.306567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:05:38.306589 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls" condition "Issuing" to 2026-06-16 01:05:38.306584878 +0000 UTC m=+470.189376636 I0616 01:05:38.321527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:38.321600 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls" condition "Ready" to 2026-06-16 01:05:38.321591716 +0000 UTC m=+470.204383484 I0616 01:05:38.650140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:38.681608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wjhgb-nss7p" condition "Approved" to 2026-06-16 01:05:38.681597139 +0000 UTC m=+470.564388897 I0616 01:05:38.700114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wjhgb-nss7p" condition "Ready" to 2026-06-16 01:05:38.700100879 +0000 UTC m=+470.582892647 I0616 01:05:38.727663 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:05:38.727652305 +0000 UTC m=+470.610444053 I0616 01:05:38.753610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wjhgb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:54.382596 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-16 01:05:54.382546609 +0000 UTC m=+486.265338397 I0616 01:05:54.382652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:05:54.382842 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-16 01:05:54.382833561 +0000 UTC m=+486.265625319 I0616 01:05:54.400722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:54.400798 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-16 01:05:54.400790709 +0000 UTC m=+486.283582467 I0616 01:05:54.580068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:54.607632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kjr4b" condition "Approved" to 2026-06-16 01:05:54.607619738 +0000 UTC m=+486.490411496 I0616 01:05:54.626343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kjr4b" condition "Ready" to 2026-06-16 01:05:54.626334927 +0000 UTC m=+486.509126675 I0616 01:05:54.658440 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:05:54.658427616 +0000 UTC m=+486.541219364 I0616 01:05:54.684361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:05:54.684623 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:05:54.684617112 +0000 UTC m=+486.567408860 I0616 01:05:54.708149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:17.947912 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-16 01:09:17.947889704 +0000 UTC m=+689.830681492 I0616 01:09:17.948012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:09:17.948190 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-16 01:09:17.948137796 +0000 UTC m=+689.830929554 I0616 01:09:17.964040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:17.964127 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-16 01:09:17.964117474 +0000 UTC m=+689.846909232 I0616 01:09:18.188577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:18.222309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-c5rts" condition "Approved" to 2026-06-16 01:09:18.222288637 +0000 UTC m=+690.105080415 I0616 01:09:18.243905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-c5rts" condition "Ready" to 2026-06-16 01:09:18.243889832 +0000 UTC m=+690.126681590 I0616 01:09:18.275551 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:18.275539109 +0000 UTC m=+690.158330857 I0616 01:09:18.310439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:10:02.368826 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-16 01:10:02.368805475 +0000 UTC m=+734.251597233 I0616 01:10:02.369009 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:10:02.369094 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-16 01:10:02.369085108 +0000 UTC m=+734.251876866 I0616 01:10:02.387400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:10:02.387590 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-16 01:10:02.387582115 +0000 UTC m=+734.270373873 I0616 01:10:02.759403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:10:02.794008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cxb59" condition "Approved" to 2026-06-16 01:10:02.79399741 +0000 UTC m=+734.676789168 I0616 01:10:02.816391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cxb59" condition "Ready" to 2026-06-16 01:10:02.816378502 +0000 UTC m=+734.699170260 I0616 01:10:02.844038 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:10:02.844022834 +0000 UTC m=+734.726814592 I0616 01:10:02.873075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"