I0617 02:58:41.614786 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0617 02:58:41.614924 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0617 02:58:41.615006 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0617 02:58:41.618872 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0617 02:58:41.619265 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0617 02:58:41.619492 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0617 02:58:41.619672 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0617 02:58:41.628481 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0617 02:58:41.642017 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0617 02:58:41.645483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0617 02:58:41.647987 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0617 02:58:41.648077 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0617 02:58:41.650590 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0617 02:58:41.655189 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0617 02:58:41.657841 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0617 02:58:41.660092 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0617 02:58:41.660150 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0617 02:58:41.660169 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0617 02:58:41.660177 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0617 02:58:41.660243 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0617 02:58:41.662946 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0617 02:58:41.665429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0617 02:58:41.668340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0617 02:58:41.670554 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0617 02:58:41.674743 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0617 02:58:41.676406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0617 02:58:41.678128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0617 02:58:41.679728 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0617 02:58:41.681470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0617 02:58:41.683183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0617 02:58:41.684927 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0617 02:58:41.686586 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0617 02:58:41.686906 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0617 02:58:41.690091 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:41.690588 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:41.690707 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:41.693985 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:41.710539 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:41.759146 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:41.773330 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:41.780460 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:41.794768 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:41.809232 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:53.782245 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-17 02:58:53.782229594 +0000 UTC m=+12.199464431 I0617 02:58:54.467299 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-17 02:58:54.467288333 +0000 UTC m=+12.884523170 I0617 02:58:54.469576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 02:58:54.469803 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-17 02:58:54.469616835 +0000 UTC m=+12.886851692 I0617 02:58:54.486281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:58:54.486354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 02:58:54.486381 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-17 02:58:54.486373786 +0000 UTC m=+12.903608623 E0617 02:58:54.488257 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0617 02:58:54.489420 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-17 02:58:54.489408448 +0000 UTC m=+12.906643315 E0617 02:58:54.489465 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 02:58:54.503487 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0617 02:58:54.503568 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 02:58:54.503604 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 02:58:54.503640 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0617 02:58:54.523369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gl2hv" condition "Approved" to 2026-06-17 02:58:54.523355545 +0000 UTC m=+12.940590402 I0617 02:58:54.535297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gl2hv" condition "Ready" to 2026-06-17 02:58:54.53528624 +0000 UTC m=+12.952521067 I0617 02:58:54.554314 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 02:58:54.554306752 +0000 UTC m=+12.971541589 I0617 02:58:54.571295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:58:59.505111 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 02:58:59.505094702 +0000 UTC m=+17.922329559 I0617 02:59:23.934099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 02:59:23.934160 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-17 02:59:23.934153252 +0000 UTC m=+42.351388089 I0617 02:59:23.934605 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-17 02:59:23.934590737 +0000 UTC m=+42.351825554 I0617 02:59:23.995722 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-17 02:59:23.995711001 +0000 UTC m=+42.412945838 I0617 02:59:23.995856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:59:23.995995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 02:59:23.996029 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-17 02:59:23.996022591 +0000 UTC m=+42.413257428 I0617 02:59:24.417406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:59:24.430818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2wj8d" condition "Approved" to 2026-06-17 02:59:24.430801507 +0000 UTC m=+42.848036374 I0617 02:59:24.478106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2wj8d" condition "Ready" to 2026-06-17 02:59:24.478088203 +0000 UTC m=+42.895323070 I0617 02:59:24.512970 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 02:59:24.51295471 +0000 UTC m=+42.930189547 I0617 02:59:24.544276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:59:24.544588 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 02:59:24.544582062 +0000 UTC m=+42.961816889 I0617 02:59:24.573591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:03:49.941982 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-06-17 03:03:49.94195876 +0000 UTC m=+308.359193587 I0617 03:03:49.942301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:03:49.942317 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-06-17 03:03:49.942314682 +0000 UTC m=+308.359549509 I0617 03:03:49.960663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:03:49.960723 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-06-17 03:03:49.960715875 +0000 UTC m=+308.377950702 I0617 03:03:50.158184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:03:50.187602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-qzxt9" condition "Approved" to 2026-06-17 03:03:50.187579711 +0000 UTC m=+308.604814638 I0617 03:03:50.216621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-qzxt9" condition "Ready" to 2026-06-17 03:03:50.216611556 +0000 UTC m=+308.633846383 I0617 03:03:50.240122 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:03:50.240117237 +0000 UTC m=+308.657352064 I0617 03:03:50.261062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:03:50.261654 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:03:50.261646522 +0000 UTC m=+308.678881359 I0617 03:03:50.265928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:03:50.278758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:03:50.278948 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:03:50.278942393 +0000 UTC m=+308.696177210 I0617 03:04:52.842310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:04:52.842349 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-17 03:04:52.842342648 +0000 UTC m=+371.259577465 I0617 03:04:52.842456 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-17 03:04:52.842381519 +0000 UTC m=+371.259616406 E0617 03:04:52.857019 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0617 03:04:52.857053 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-17 03:04:52.85704579 +0000 UTC m=+371.274280627 E0617 03:04:52.857603 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0617 03:04:52.863436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:04:52.863494 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-17 03:04:52.863487076 +0000 UTC m=+371.280721903 E0617 03:04:52.873034 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0617 03:04:52.873224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:04:52.873271 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-17 03:04:52.873265933 +0000 UTC m=+371.290500760 E0617 03:04:52.873698 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 03:04:52.873735 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 03:04:52.873871 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0617 03:04:52.874172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:04:52.877861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-blnmx" condition "Approved" to 2026-06-17 03:04:52.877853359 +0000 UTC m=+371.295088176 I0617 03:04:52.884645 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-17 03:04:52.884589293 +0000 UTC m=+371.301824130 I0617 03:04:52.891289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-blnmx" condition "Ready" to 2026-06-17 03:04:52.891276956 +0000 UTC m=+371.308511803 I0617 03:04:52.892955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:04:52.951484 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:04:52.951472062 +0000 UTC m=+371.368706889 I0617 03:04:52.969430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:04:52.969758 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:04:52.969750141 +0000 UTC m=+371.386984978 I0617 03:04:52.981999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:04:52.982240 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:04:52.982232533 +0000 UTC m=+371.399467370 I0617 03:04:57.873353 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:04:57.873342116 +0000 UTC m=+376.290576943 I0617 03:05:37.705203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:05:37.705277 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-17 03:05:37.705271544 +0000 UTC m=+416.122506371 I0617 03:05:37.707795 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-17 03:05:37.707787136 +0000 UTC m=+416.125021953 I0617 03:05:37.708423 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-17 03:05:37.708419279 +0000 UTC m=+416.125654106 I0617 03:05:37.708687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:05:37.708702 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-17 03:05:37.7086992 +0000 UTC m=+416.125934027 I0617 03:05:37.714772 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-17 03:05:37.714767751 +0000 UTC m=+416.132002578 I0617 03:05:37.714978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:05:37.714997 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-17 03:05:37.714993839 +0000 UTC m=+416.132228666 I0617 03:05:37.822071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:37.822294 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-17 03:05:37.822284882 +0000 UTC m=+416.239519709 I0617 03:05:37.822753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:37.824234 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-17 03:05:37.824229642 +0000 UTC m=+416.241464469 I0617 03:05:37.830086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:37.830172 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-17 03:05:37.830163449 +0000 UTC m=+416.247398276 I0617 03:05:37.970371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:38.014051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rngxj" condition "Approved" to 2026-06-17 03:05:38.014033947 +0000 UTC m=+416.431268784 I0617 03:05:38.032457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:38.033371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rngxj" condition "Ready" to 2026-06-17 03:05:38.033364545 +0000 UTC m=+416.450599372 I0617 03:05:38.066881 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:05:38.066872741 +0000 UTC m=+416.484107568 I0617 03:05:38.075426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-j4xwq" condition "Approved" to 2026-06-17 03:05:38.075418796 +0000 UTC m=+416.492653633 I0617 03:05:38.099454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:38.099920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-j4xwq" condition "Ready" to 2026-06-17 03:05:38.099904522 +0000 UTC m=+416.517139359 I0617 03:05:38.143076 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:05:38.143066584 +0000 UTC m=+416.560301421 I0617 03:05:38.149859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:38.227533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:38.433675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bhq8g" condition "Approved" to 2026-06-17 03:05:38.433655109 +0000 UTC m=+416.850889946 I0617 03:05:38.789305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bhq8g" condition "Ready" to 2026-06-17 03:05:38.789294157 +0000 UTC m=+417.206528994 I0617 03:05:39.178581 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:05:39.178566247 +0000 UTC m=+417.595801084 I0617 03:05:39.226098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:39.328049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:39.328549 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:05:39.328537197 +0000 UTC m=+417.745772064 I0617 03:05:39.528996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:57.203413 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" condition "Ready" to 2026-06-17 03:05:57.203387182 +0000 UTC m=+435.620622039 I0617 03:05:57.203747 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:05:57.203789 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" condition "Issuing" to 2026-06-17 03:05:57.203777867 +0000 UTC m=+435.621012734 I0617 03:05:57.277644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:57.277879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:05:57.277920 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" condition "Issuing" to 2026-06-17 03:05:57.277910762 +0000 UTC m=+435.695145629 I0617 03:05:58.023686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x9x5n-dtmmv" condition "Approved" to 2026-06-17 03:05:58.023670624 +0000 UTC m=+436.440905491 I0617 03:05:58.076742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x9x5n-dtmmv" condition "Ready" to 2026-06-17 03:05:58.076705552 +0000 UTC m=+436.493940379 I0617 03:05:58.256872 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:05:58.256857461 +0000 UTC m=+436.674092298 I0617 03:05:58.289986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:58.290307 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:05:58.29030201 +0000 UTC m=+436.707536837 I0617 03:05:58.324972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:58.325200 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x9x5n-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:05:58.325195377 +0000 UTC m=+436.742430204 I0617 03:06:19.473376 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-17 03:06:19.473350408 +0000 UTC m=+457.890585235 I0617 03:06:19.473810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:06:19.473830 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-17 03:06:19.473826297 +0000 UTC m=+457.891061134 I0617 03:06:19.488319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:19.488371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:06:19.488387 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-17 03:06:19.488379797 +0000 UTC m=+457.905614624 I0617 03:06:19.931478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z5pqm" condition "Approved" to 2026-06-17 03:06:19.931466825 +0000 UTC m=+458.348701642 I0617 03:06:20.039369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z5pqm" condition "Ready" to 2026-06-17 03:06:20.039359997 +0000 UTC m=+458.456594824 I0617 03:06:20.235181 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:06:20.235171196 +0000 UTC m=+458.652406033 I0617 03:06:20.402482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:09:33.413816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:09:33.413866 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-17 03:09:33.413859505 +0000 UTC m=+651.831094352 I0617 03:09:33.413827 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-17 03:09:33.413804082 +0000 UTC m=+651.831038949 I0617 03:09:33.436769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:09:33.436866 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-17 03:09:33.436855891 +0000 UTC m=+651.854090758 I0617 03:09:33.643029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:09:33.669742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m94sn" condition "Approved" to 2026-06-17 03:09:33.669725724 +0000 UTC m=+652.086960581 I0617 03:09:33.695411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m94sn" condition "Ready" to 2026-06-17 03:09:33.695400718 +0000 UTC m=+652.112635555 I0617 03:09:33.724099 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:09:33.724088075 +0000 UTC m=+652.141322912 I0617 03:09:33.750851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:09:33.751140 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:09:33.751134663 +0000 UTC m=+652.168369490 I0617 03:09:33.771552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:09:33.771746 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:09:33.771738609 +0000 UTC m=+652.188973436 I0617 03:10:23.779012 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-17 03:10:23.779000798 +0000 UTC m=+702.196235625 I0617 03:10:23.779373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:10:23.779403 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-17 03:10:23.77940039 +0000 UTC m=+702.196635217 I0617 03:10:23.798889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:10:23.799013 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-17 03:10:23.799006702 +0000 UTC m=+702.216241549 I0617 03:10:23.921498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:10:23.962264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-z2hpq" condition "Approved" to 2026-06-17 03:10:23.962254402 +0000 UTC m=+702.379489229 I0617 03:10:23.979889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-z2hpq" condition "Ready" to 2026-06-17 03:10:23.979878493 +0000 UTC m=+702.397113330 I0617 03:10:24.009991 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:10:24.009979702 +0000 UTC m=+702.427214519 I0617 03:10:24.032267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"