I0616 01:02:17.475303 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0616 01:02:17.475449 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0616 01:02:17.475531 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0616 01:02:17.482591 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0616 01:02:17.483476 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0616 01:02:17.483558 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0616 01:02:17.483677 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0616 01:02:17.486615 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0616 01:02:17.502149 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0616 01:02:17.505778 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0616 01:02:17.511046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0616 01:02:17.514269 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0616 01:02:17.518432 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0616 01:02:17.521010 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0616 01:02:17.521034 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0616 01:02:17.521045 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0616 01:02:17.521051 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0616 01:02:17.521112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0616 01:02:17.523090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0616 01:02:17.525010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0616 01:02:17.526983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0616 01:02:17.529317 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0616 01:02:17.534036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0616 01:02:17.538974 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0616 01:02:17.541317 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0616 01:02:17.543248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0616 01:02:17.545299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0616 01:02:17.547364 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0616 01:02:17.549286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0616 01:02:17.551013 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0616 01:02:17.551061 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0616 01:02:17.552942 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0616 01:02:17.562448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0616 01:02:17.562573 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 01:02:17.563600 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 01:02:17.567564 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 01:02:17.578350 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 01:02:17.599900 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 01:02:17.618729 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 01:02:17.638547 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 01:02:17.652637 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 01:02:17.663902 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 01:02:17.679810 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 01:02:28.803508 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-16 01:02:28.803485211 +0000 UTC m=+11.364653625 I0616 01:02:29.539948 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-16 01:02:29.539934413 +0000 UTC m=+12.101102787 I0616 01:02:29.540010 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:02:29.540070 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-16 01:02:29.540061666 +0000 UTC m=+12.101230050 E0616 01:02:29.553460 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 01:02:29.553528 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-16 01:02:29.553520312 +0000 UTC m=+12.114688696 E0616 01:02:29.553552 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 01:02:29.557746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:02:29.557811 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:02:29.557827 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-16 01:02:29.557822803 +0000 UTC m=+12.118991187 E0616 01:02:29.568913 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0616 01:02:29.569029 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 01:02:29.569104 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 01:02:29.569141 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0616 01:02:29.607065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zptkl" condition "Approved" to 2026-06-16 01:02:29.607048727 +0000 UTC m=+12.168217111 I0616 01:02:29.621246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zptkl" condition "Ready" to 2026-06-16 01:02:29.621232819 +0000 UTC m=+12.182401193 I0616 01:02:29.648130 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:02:29.64811194 +0000 UTC m=+12.209280344 I0616 01:02:29.670135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:02:29.670509 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:02:29.670502745 +0000 UTC m=+12.231671129 I0616 01:02:29.682679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:02:29.685808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:02:29.686087 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:02:29.68607726 +0000 UTC m=+12.247245634 I0616 01:02:34.569833 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:02:34.569811384 +0000 UTC m=+17.130979798 I0616 01:02:58.582718 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-16 01:02:58.582661862 +0000 UTC m=+41.143830246 I0616 01:02:58.585028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:02:58.585052 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-16 01:02:58.585048275 +0000 UTC m=+41.146216649 I0616 01:02:58.609129 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-16 01:02:58.609111793 +0000 UTC m=+41.170280167 I0616 01:02:58.627558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:02:58.628036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:02:58.628105 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-16 01:02:58.628096346 +0000 UTC m=+41.189264730 I0616 01:02:58.909545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6r559" condition "Approved" to 2026-06-16 01:02:58.9095298 +0000 UTC m=+41.470698184 I0616 01:02:58.945366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6r559" condition "Ready" to 2026-06-16 01:02:58.945353266 +0000 UTC m=+41.506521650 I0616 01:02:58.985941 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:02:58.98592494 +0000 UTC m=+41.547093324 I0616 01:02:59.024703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:07:08.391635 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-06-16 01:07:08.39160249 +0000 UTC m=+290.952770904 I0616 01:07:08.392502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:07:08.392632 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-06-16 01:07:08.392620366 +0000 UTC m=+290.953788780 I0616 01:07:08.419481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:07:08.419637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:07:08.419735 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-06-16 01:07:08.419699569 +0000 UTC m=+290.980867983 I0616 01:07:08.621456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-jsx92" condition "Approved" to 2026-06-16 01:07:08.621441529 +0000 UTC m=+291.182609933 I0616 01:07:08.653795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-jsx92" condition "Ready" to 2026-06-16 01:07:08.653783247 +0000 UTC m=+291.214951641 I0616 01:07:08.686226 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:07:08.686210878 +0000 UTC m=+291.247379292 I0616 01:07:08.708025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:08:15.001963 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-16 01:08:15.001921125 +0000 UTC m=+357.563089539 I0616 01:08:15.002041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:08:15.002315 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-16 01:08:15.002308414 +0000 UTC m=+357.563476798 E0616 01:08:15.015272 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 01:08:15.015332 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-16 01:08:15.015322243 +0000 UTC m=+357.576490627 E0616 01:08:15.015400 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 01:08:15.020558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:08:15.020787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:08:15.020845 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-16 01:08:15.020836917 +0000 UTC m=+357.582005311 E0616 01:08:15.031623 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0616 01:08:15.031931 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 01:08:15.031994 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 01:08:15.032798 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0616 01:08:15.062863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cwnpf" condition "Approved" to 2026-06-16 01:08:15.062837897 +0000 UTC m=+357.624006311 I0616 01:08:15.077622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cwnpf" condition "Ready" to 2026-06-16 01:08:15.077609153 +0000 UTC m=+357.638777527 I0616 01:08:15.098148 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:08:15.098132978 +0000 UTC m=+357.659301372 I0616 01:08:15.114661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:08:15.115698 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:08:15.115668911 +0000 UTC m=+357.676837325 I0616 01:08:15.129280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:08:20.032638 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:08:20.032608737 +0000 UTC m=+362.593777141 I0616 01:09:05.896360 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-16 01:09:05.896336832 +0000 UTC m=+408.457505196 I0616 01:09:05.899232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:09:05.899268 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-16 01:09:05.899261985 +0000 UTC m=+408.460430359 I0616 01:09:05.899313 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-16 01:09:05.899303836 +0000 UTC m=+408.460472210 I0616 01:09:05.902064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:09:05.902105 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-16 01:09:05.902096347 +0000 UTC m=+408.463264731 I0616 01:09:05.902516 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-16 01:09:05.902511364 +0000 UTC m=+408.463679748 I0616 01:09:05.903392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:09:05.903525 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-16 01:09:05.903519633 +0000 UTC m=+408.464687997 I0616 01:09:05.942677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:05.942724 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-16 01:09:05.942718839 +0000 UTC m=+408.503887223 I0616 01:09:05.949068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:05.949119 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-16 01:09:05.949116046 +0000 UTC m=+408.510284420 I0616 01:09:05.956605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:05.956667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:09:05.956691 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-16 01:09:05.956685534 +0000 UTC m=+408.517853918 I0616 01:09:06.076921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:06.101569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tc5wf" condition "Approved" to 2026-06-16 01:09:06.101560765 +0000 UTC m=+408.662729139 I0616 01:09:06.111732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-h89gw" condition "Approved" to 2026-06-16 01:09:06.111722781 +0000 UTC m=+408.672891165 I0616 01:09:06.121052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tc5wf" condition "Ready" to 2026-06-16 01:09:06.121042751 +0000 UTC m=+408.682211125 I0616 01:09:06.126786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-h89gw" condition "Ready" to 2026-06-16 01:09:06.126779885 +0000 UTC m=+408.687948259 I0616 01:09:06.153117 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:06.153106426 +0000 UTC m=+408.714274810 I0616 01:09:06.156733 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:06.15666251 +0000 UTC m=+408.717830884 I0616 01:09:06.192588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:06.195400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:06.195679 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:06.195674151 +0000 UTC m=+408.756842525 I0616 01:09:06.268903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:06.269294 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:06.269284853 +0000 UTC m=+408.830453237 I0616 01:09:06.317242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:06.614469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:06.814771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:06.871238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rm26j" condition "Approved" to 2026-06-16 01:09:06.871219203 +0000 UTC m=+409.432387587 I0616 01:09:07.023680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rm26j" condition "Ready" to 2026-06-16 01:09:07.023664021 +0000 UTC m=+409.584832425 I0616 01:09:07.417809 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:07.417788298 +0000 UTC m=+409.978956712 I0616 01:09:07.518116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:07.518738 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:07.518727513 +0000 UTC m=+410.079895917 I0616 01:09:07.714676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:22.386574 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" condition "Ready" to 2026-06-16 01:09:22.386552138 +0000 UTC m=+424.947720522 I0616 01:09:22.387508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:09:22.387570 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" condition "Issuing" to 2026-06-16 01:09:22.387559026 +0000 UTC m=+424.948727400 I0616 01:09:22.412004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:22.412103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:09:22.412135 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" condition "Issuing" to 2026-06-16 01:09:22.412126669 +0000 UTC m=+424.973295063 I0616 01:09:22.615528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:22.636480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lkp5m-cf9k8" condition "Approved" to 2026-06-16 01:09:22.636465654 +0000 UTC m=+425.197634028 I0616 01:09:22.670573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lkp5m-cf9k8" condition "Ready" to 2026-06-16 01:09:22.670564125 +0000 UTC m=+425.231732499 I0616 01:09:22.710146 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:22.710125572 +0000 UTC m=+425.271293946 I0616 01:09:22.737703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:22.737964 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:22.737955473 +0000 UTC m=+425.299123847 I0616 01:09:22.761235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:22.761441 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lkp5m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:22.761431466 +0000 UTC m=+425.322599830 I0616 01:09:28.470373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:09:28.470403 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-16 01:09:28.470396534 +0000 UTC m=+431.031564908 I0616 01:09:28.470796 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-16 01:09:28.470792252 +0000 UTC m=+431.031960626 I0616 01:09:28.486076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:28.486225 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-16 01:09:28.48621726 +0000 UTC m=+431.047385634 I0616 01:09:28.593123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:28.631087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vqqw4" condition "Approved" to 2026-06-16 01:09:28.631069744 +0000 UTC m=+431.192238128 I0616 01:09:28.654879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vqqw4" condition "Ready" to 2026-06-16 01:09:28.654869649 +0000 UTC m=+431.216038023 I0616 01:09:28.685268 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:28.685251338 +0000 UTC m=+431.246419712 I0616 01:09:28.706357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:28.706930 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:28.706919926 +0000 UTC m=+431.268088310 I0616 01:09:28.719634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:28.723804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:09:28.724103 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:09:28.724096775 +0000 UTC m=+431.285265149 I0616 01:12:43.797580 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-16 01:12:43.797555569 +0000 UTC m=+626.358723973 I0616 01:12:43.798139 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:12:43.798186 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-16 01:12:43.798182639 +0000 UTC m=+626.359351013 I0616 01:12:43.821380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:12:43.821649 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-16 01:12:43.821635489 +0000 UTC m=+626.382803893 I0616 01:12:44.152571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:12:44.184748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z6h5f" condition "Approved" to 2026-06-16 01:12:44.184739084 +0000 UTC m=+626.745907458 I0616 01:12:44.206309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z6h5f" condition "Ready" to 2026-06-16 01:12:44.206300927 +0000 UTC m=+626.767469311 I0616 01:12:44.239990 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:12:44.239978561 +0000 UTC m=+626.801146945 I0616 01:12:44.262003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:12:44.262310 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:12:44.262302466 +0000 UTC m=+626.823470850 I0616 01:12:44.289109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:12:44.289468 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:12:44.289459629 +0000 UTC m=+626.850627993 I0616 01:13:27.915529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 01:13:27.915615 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-16 01:13:27.915609236 +0000 UTC m=+670.476777620 I0616 01:13:27.916331 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-16 01:13:27.916325587 +0000 UTC m=+670.477493971 I0616 01:13:27.946403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:13:27.946462 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-16 01:13:27.946455623 +0000 UTC m=+670.507623997 I0616 01:13:28.239829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:13:28.275888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7n46m" condition "Approved" to 2026-06-16 01:13:28.275878795 +0000 UTC m=+670.837047179 I0616 01:13:28.300264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7n46m" condition "Ready" to 2026-06-16 01:13:28.300253682 +0000 UTC m=+670.861422056 I0616 01:13:28.334998 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:13:28.334981951 +0000 UTC m=+670.896150345 I0616 01:13:28.358883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:13:28.360545 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 01:13:28.360539724 +0000 UTC m=+670.921708098 I0616 01:13:28.363364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 01:13:28.378126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"