I0624 17:55:47.117890 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0624 17:55:47.118113 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0624 17:55:47.122135 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0624 17:55:47.122187 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0624 17:55:47.122308 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0624 17:55:47.122987 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0624 17:55:47.123131 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0624 17:55:47.123304 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0624 17:55:47.128576 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0624 17:55:47.143715 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0624 17:55:47.149176 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0624 17:55:47.153294 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0624 17:55:47.156587 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0624 17:55:47.162391 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0624 17:55:47.165555 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0624 17:55:47.167387 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0624 17:55:47.169329 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0624 17:55:47.171168 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0624 17:55:47.178111 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0624 17:55:47.182122 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0624 17:55:47.184736 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0624 17:55:47.186851 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0624 17:55:47.188991 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0624 17:55:47.190917 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0624 17:55:47.193184 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0624 17:55:47.193205 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0624 17:55:47.193282 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0624 17:55:47.199406 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0624 17:55:47.199432 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0624 17:55:47.199444 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0624 17:55:47.199454 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0624 17:55:47.199596 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0624 17:55:47.202512 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0624 17:55:47.205031 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0624 17:55:47.206866 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:47.208822 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:47.208899 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:47.209260 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:47.210195 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:47.209285 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:47.225679 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:47.250228 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:47.268626 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:47.293956 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:47.307509 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0624 17:55:58.989240 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-24 17:55:58.988669299 +0000 UTC m=+11.901677595 I0624 17:55:59.702017 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-24 17:55:59.701982977 +0000 UTC m=+12.614991273 I0624 17:55:59.702948 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:55:59.703041 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 17:55:59.70302785 +0000 UTC m=+12.616036146 I0624 17:55:59.715152 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:55:59.715250 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:55:59.715278 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 17:55:59.715271034 +0000 UTC m=+12.628279310 E0624 17:55:59.715504 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 17:55:59.715574 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-24 17:55:59.715565751 +0000 UTC m=+12.628574027 E0624 17:55:59.718614 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:55:59.730578 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0624 17:55:59.730660 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:55:59.730723 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:55:59.730831 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0624 17:55:59.764217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-24 17:55:59.764205536 +0000 UTC m=+12.677213812 I0624 17:55:59.782199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-24 17:55:59.782189258 +0000 UTC m=+12.695197534 I0624 17:55:59.802135 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:55:59.802119633 +0000 UTC m=+12.715127939 I0624 17:55:59.816467 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:56:04.732021 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:56:04.732002997 +0000 UTC m=+17.645011293 I0624 17:56:27.946235 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:56:27.946354 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 17:56:27.946337652 +0000 UTC m=+40.859345948 I0624 17:56:27.946333 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 17:56:27.946317021 +0000 UTC m=+40.859325297 I0624 17:56:27.967530 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:56:27.967606 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:56:27.967625 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 17:56:27.967618746 +0000 UTC m=+40.880627022 I0624 17:56:27.969046 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-24 17:56:27.969038837 +0000 UTC m=+40.882047113 I0624 17:56:28.210614 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-24 17:56:28.210602207 +0000 UTC m=+41.123610483 I0624 17:56:28.244794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-24 17:56:28.244781502 +0000 UTC m=+41.157789778 I0624 17:56:28.282182 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:56:28.282166528 +0000 UTC m=+41.195174804 I0624 17:56:28.305559 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:56:28.339716 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:00:44.163786 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-130.nip.io-tls" condition "Ready" to 2026-06-24 18:00:44.163751445 +0000 UTC m=+297.076759711 I0624 18:00:44.164127 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-130.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:00:44.164164 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-130.nip.io-tls" condition "Issuing" to 2026-06-24 18:00:44.164159993 +0000 UTC m=+297.077168259 I0624 18:00:44.175492 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-130.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-130.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:00:44.175675 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-130.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:00:44.175796 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-130.nip.io-tls" condition "Issuing" to 2026-06-24 18:00:44.175785545 +0000 UTC m=+297.088793851 I0624 18:00:44.463563 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-130.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-130.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:00:44.480553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-130.nip.io-tls-1" condition "Approved" to 2026-06-24 18:00:44.480540041 +0000 UTC m=+297.393548317 I0624 18:00:44.499005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-130.nip.io-tls-1" condition "Ready" to 2026-06-24 18:00:44.498990491 +0000 UTC m=+297.411998767 I0624 18:00:44.523872 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-130.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:00:44.523858171 +0000 UTC m=+297.436866447 I0624 18:00:44.538048 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-130.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-130.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:01:51.189342 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:01:51.189398 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-24 18:01:51.189381642 +0000 UTC m=+364.102389908 I0624 18:01:51.189426 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 18:01:51.189413752 +0000 UTC m=+364.102422058 I0624 18:01:51.201852 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:01:51.202053 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:01:51.202084 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 18:01:51.20207635 +0000 UTC m=+364.115084626 E0624 18:01:51.202223 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 18:01:51.202348 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-24 18:01:51.202277904 +0000 UTC m=+364.115286180 E0624 18:01:51.202389 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 18:01:51.221431 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0624 18:01:51.221522 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 18:01:51.221556 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 18:01:51.221588 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0624 18:01:51.248322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-24 18:01:51.248306928 +0000 UTC m=+364.161315204 I0624 18:01:51.261460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-24 18:01:51.261448636 +0000 UTC m=+364.174456912 I0624 18:01:51.286266 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:01:51.286252388 +0000 UTC m=+364.199260674 I0624 18:01:51.297775 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:01:56.222064 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:01:56.222054116 +0000 UTC m=+369.135062392 I0624 18:02:37.595096 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 18:02:37.595060142 +0000 UTC m=+410.508068408 I0624 18:02:37.595759 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 18:02:37.595745427 +0000 UTC m=+410.508753693 I0624 18:02:37.599798 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:02:37.600391 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:02:37.600434 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 18:02:37.600426311 +0000 UTC m=+410.513434587 I0624 18:02:37.604118 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 18:02:37.604096383 +0000 UTC m=+410.517104649 I0624 18:02:37.599843 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 18:02:37.599836619 +0000 UTC m=+410.512844885 I0624 18:02:37.604442 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:02:37.604468 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 18:02:37.604464972 +0000 UTC m=+410.517473238 I0624 18:02:37.634049 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:37.634140 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 18:02:37.634132126 +0000 UTC m=+410.547140392 I0624 18:02:37.634229 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:37.635047 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:02:37.635063 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 18:02:37.635060327 +0000 UTC m=+410.548068583 I0624 18:02:37.637468 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:37.637539 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:02:37.640547 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 18:02:37.637565293 +0000 UTC m=+410.550573579 I0624 18:02:37.829739 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:37.865562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-24 18:02:37.865545179 +0000 UTC m=+410.778553445 I0624 18:02:37.898798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-24 18:02:37.898781784 +0000 UTC m=+410.811790060 I0624 18:02:37.970315 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:02:37.970301915 +0000 UTC m=+410.883310181 I0624 18:02:37.976189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-24 18:02:37.976173196 +0000 UTC m=+410.889181462 I0624 18:02:38.026364 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:38.026822 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:02:38.026816931 +0000 UTC m=+410.939825197 I0624 18:02:38.026953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-24 18:02:38.026944084 +0000 UTC m=+410.939952350 I0624 18:02:38.046043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-24 18:02:38.044433555 +0000 UTC m=+410.957441821 I0624 18:02:38.051943 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:38.305048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-24 18:02:38.30502573 +0000 UTC m=+411.218034036 I0624 18:02:38.389709 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:02:38.389693296 +0000 UTC m=+411.302701582 I0624 18:02:38.683147 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:38.737824 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:02:38.73780659 +0000 UTC m=+411.650814886 I0624 18:02:38.898885 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:38.899782 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:02:38.899772466 +0000 UTC m=+411.812780762 I0624 18:02:39.182559 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:39.384289 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:47.521479 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:02:47.521525 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" condition "Issuing" to 2026-06-24 18:02:47.521514175 +0000 UTC m=+420.434522471 I0624 18:02:47.521565 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" condition "Ready" to 2026-06-24 18:02:47.521544026 +0000 UTC m=+420.434552332 I0624 18:02:47.548757 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-48gs2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:47.549331 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:02:47.549580 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" condition "Issuing" to 2026-06-24 18:02:47.549365868 +0000 UTC m=+420.462374174 I0624 18:02:47.902267 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-48gs2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:47.943312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-48gs2-tls-1" condition "Approved" to 2026-06-24 18:02:47.943294931 +0000 UTC m=+420.856303237 I0624 18:02:47.977473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-48gs2-tls-1" condition "Ready" to 2026-06-24 18:02:47.977465504 +0000 UTC m=+420.890473770 I0624 18:02:48.171763 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:02:48.171744345 +0000 UTC m=+421.084752651 I0624 18:02:48.299253 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-48gs2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:02:48.300553 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:02:48.300546692 +0000 UTC m=+421.213554958 I0624 18:02:48.329652 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-48gs2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-48gs2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:03:04.617712 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-24 18:03:04.617679337 +0000 UTC m=+437.530687623 I0624 18:03:04.618132 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:03:04.618167 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 18:03:04.618160178 +0000 UTC m=+437.531168454 I0624 18:03:04.632147 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:03:04.632371 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:03:04.632467 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 18:03:04.632458277 +0000 UTC m=+437.545466573 I0624 18:03:04.907753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-24 18:03:04.907734038 +0000 UTC m=+437.820742344 I0624 18:03:04.924283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-24 18:03:04.924272675 +0000 UTC m=+437.837280951 I0624 18:03:04.956413 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:03:04.956400601 +0000 UTC m=+437.869408877 I0624 18:03:04.967521 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:03:04.968107 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:03:04.968100421 +0000 UTC m=+437.881108687 I0624 18:03:04.994126 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:06:31.407982 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 18:06:31.407965547 +0000 UTC m=+644.320973853 I0624 18:06:31.408737 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:06:31.408779 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 18:06:31.408771565 +0000 UTC m=+644.321779881 I0624 18:06:31.419419 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:06:31.419531 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:06:31.419598 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 18:06:31.419591411 +0000 UTC m=+644.332599707 I0624 18:06:31.623115 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:06:31.633669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-24 18:06:31.633656238 +0000 UTC m=+644.546664514 I0624 18:06:31.647473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-24 18:06:31.64745986 +0000 UTC m=+644.560468146 I0624 18:06:31.666565 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:06:31.666556247 +0000 UTC m=+644.579564503 I0624 18:06:31.685001 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:06:31.685562 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:06:31.685554552 +0000 UTC m=+644.598562818 I0624 18:06:31.691420 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:06:31.704890 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:06:31.705093 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:06:31.705672 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:06:31.705661462 +0000 UTC m=+644.618669748 I0624 18:07:12.706610 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-24 18:07:12.706589101 +0000 UTC m=+685.619597377 I0624 18:07:12.707369 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:07:12.707424 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 18:07:12.707419698 +0000 UTC m=+685.620427974 I0624 18:07:12.720606 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:07:12.720861 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 18:07:12.720897 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 18:07:12.720887152 +0000 UTC m=+685.633895418 I0624 18:07:12.934868 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:07:12.947370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-24 18:07:12.947359874 +0000 UTC m=+685.860368150 I0624 18:07:12.962177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-24 18:07:12.962164648 +0000 UTC m=+685.875172944 I0624 18:07:12.989845 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:07:12.989831102 +0000 UTC m=+685.902839378 I0624 18:07:13.005200 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 18:07:13.005980 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 18:07:13.005972124 +0000 UTC m=+685.918980420 I0624 18:07:13.018661 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"