I0624 17:10:59.248190       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0624 17:10:59.248305       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0624 17:10:59.248376       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0624 17:10:59.251724       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0624 17:10:59.252058       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0624 17:10:59.252108       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0624 17:10:59.252155       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0624 17:10:59.254406       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0624 17:10:59.269131       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0624 17:10:59.269677       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0624 17:10:59.274939       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0624 17:10:59.279592       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0624 17:10:59.284158       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0624 17:10:59.286905       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0624 17:10:59.289363       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0624 17:10:59.289455       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0624 17:10:59.291941       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0624 17:10:59.294382       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0624 17:10:59.294423       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0624 17:10:59.296814       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0624 17:10:59.303438       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0624 17:10:59.308426       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0624 17:10:59.310892       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0624 17:10:59.313390       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0624 17:10:59.315654       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0624 17:10:59.318597       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0624 17:10:59.321402       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0624 17:10:59.323565       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0624 17:10:59.326556       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0624 17:10:59.326591       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0624 17:10:59.326605       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0624 17:10:59.328139       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0624 17:10:59.332267       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0624 17:10:59.336235       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0624 17:10:59.336285       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0624 17:10:59.337392       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0624 17:10:59.349878       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0624 17:10:59.361327       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0624 17:10:59.384671       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0624 17:10:59.396244       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0624 17:10:59.412440       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0624 17:10:59.428980       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0624 17:10:59.430639       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0624 17:11:11.921862       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-24 17:11:11.921846167 +0000 UTC m=+12.703682302
I0624 17:11:12.636126       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-24 17:11:12.636108165 +0000 UTC m=+13.417944310
I0624 17:11:12.636240       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:11:12.636493       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 17:11:12.63645898 +0000 UTC m=+13.418295135
E0624 17:11:12.649771       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0624 17:11:12.649891       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-24 17:11:12.649880171 +0000 UTC m=+13.431716336
E0624 17:11:12.650124       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0624 17:11:12.650714       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:11:12.651077       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:11:12.651294       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 17:11:12.651231528 +0000 UTC m=+13.433067703
E0624 17:11:12.668307       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0624 17:11:12.669717       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0624 17:11:12.669819       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0624 17:11:12.669890       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0624 17:11:12.703271       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vbdtj" condition "Approved" to 2026-06-24 17:11:12.7032569 +0000 UTC m=+13.485093065
I0624 17:11:12.717833       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vbdtj" condition "Ready" to 2026-06-24 17:11:12.717825934 +0000 UTC m=+13.499662059
I0624 17:11:12.739423       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:11:12.739414819 +0000 UTC m=+13.521250954
I0624 17:11:12.757224       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:11:12.757617       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:11:12.757603661 +0000 UTC m=+13.539439796
I0624 17:11:12.778151       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:11:17.669048       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:11:17.669034996 +0000 UTC m=+18.450871141
I0624 17:11:42.844646       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 17:11:42.842563461 +0000 UTC m=+43.624399606
I0624 17:11:42.844656       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:11:42.845003       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 17:11:42.844994178 +0000 UTC m=+43.626830323
I0624 17:11:42.862880       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-24 17:11:42.862868895 +0000 UTC m=+43.644705020
I0624 17:11:42.871350       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:11:42.872450       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:11:42.872481       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 17:11:42.872476142 +0000 UTC m=+43.654312277
I0624 17:11:42.988335       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lv25d" condition "Approved" to 2026-06-24 17:11:42.988324807 +0000 UTC m=+43.770160942
I0624 17:11:43.012225       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lv25d" condition "Ready" to 2026-06-24 17:11:43.012215621 +0000 UTC m=+43.794051756
I0624 17:11:43.040314       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:11:43.040294401 +0000 UTC m=+43.822130576
I0624 17:11:43.072128       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:11:43.072537       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:11:43.072529467 +0000 UTC m=+43.854365602
I0624 17:11:43.090290       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:11:43.090761       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:11:43.090750539 +0000 UTC m=+43.872586694
I0624 17:16:14.979220       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready" to 2026-06-24 17:16:14.979181946 +0000 UTC m=+315.761018111
I0624 17:16:14.979776       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-60.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:16:14.980078       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Issuing" to 2026-06-24 17:16:14.979817935 +0000 UTC m=+315.761654100
I0624 17:16:15.013365       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:16:15.013429       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready" to 2026-06-24 17:16:15.013422684 +0000 UTC m=+315.795258809
I0624 17:16:15.431505       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:16:15.457121       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-60.nip.io-tls-m7pc2" condition "Approved" to 2026-06-24 17:16:15.457112825 +0000 UTC m=+316.238948960
I0624 17:16:15.494904       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-60.nip.io-tls-m7pc2" condition "Ready" to 2026-06-24 17:16:15.494894871 +0000 UTC m=+316.276731006
I0624 17:16:15.527395       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:15.527380243 +0000 UTC m=+316.309216388
I0624 17:16:15.551172       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:16:15.551683       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:15.551674771 +0000 UTC m=+316.333510916
I0624 17:16:15.571533       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:16:15.571955       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:15.571944245 +0000 UTC m=+316.353780420
I0624 17:16:15.572346       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:17:20.381210       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-24 17:17:20.381145156 +0000 UTC m=+381.162981321
I0624 17:17:20.382329       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:17:20.382520       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 17:17:20.382507083 +0000 UTC m=+381.164343278
E0624 17:17:20.402443       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0624 17:17:20.402530       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-24 17:17:20.402522543 +0000 UTC m=+381.184358688
E0624 17:17:20.402631       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0624 17:17:20.406213       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:17:20.406559       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:17:20.406641       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 17:17:20.406630654 +0000 UTC m=+381.188466799
E0624 17:17:20.558875       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0624 17:17:20.559002       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0624 17:17:20.559041       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0624 17:17:20.559085       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0624 17:17:20.858968       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mnrkn" condition "Approved" to 2026-06-24 17:17:20.858954543 +0000 UTC m=+381.640790708
I0624 17:17:20.897595       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mnrkn" condition "Ready" to 2026-06-24 17:17:20.897580236 +0000 UTC m=+381.679416411
I0624 17:17:20.923639       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:17:20.923630081 +0000 UTC m=+381.705466216
I0624 17:17:20.941332       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:17:20.980300       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:17:25.560172       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:17:25.560157887 +0000 UTC m=+386.341994052
I0624 17:18:06.026063       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:18:06.026200       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 17:18:06.026191976 +0000 UTC m=+426.808028111
I0624 17:18:06.031581       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 17:18:06.025062252 +0000 UTC m=+426.806898387
I0624 17:18:06.052933       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 17:18:06.052916342 +0000 UTC m=+426.834752487
I0624 17:18:06.052994       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:18:06.053040       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 17:18:06.053028793 +0000 UTC m=+426.834864958
I0624 17:18:06.053429       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:18:06.053476       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 17:18:06.053473178 +0000 UTC m=+426.835309313
I0624 17:18:06.053716       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:06.053868       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 17:18:06.053860733 +0000 UTC m=+426.835696868
I0624 17:18:06.054001       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 17:18:06.053994074 +0000 UTC m=+426.835830229
I0624 17:18:06.094546       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:06.094610       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 17:18:06.094601375 +0000 UTC m=+426.876437510
I0624 17:18:06.097312       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:06.097487       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:18:06.097524       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 17:18:06.097521229 +0000 UTC m=+426.879357364
I0624 17:18:06.263789       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-59nzf" condition "Approved" to 2026-06-24 17:18:06.263773197 +0000 UTC m=+427.045609342
I0624 17:18:06.312304       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-59nzf" condition "Ready" to 2026-06-24 17:18:06.312290551 +0000 UTC m=+427.094126696
I0624 17:18:06.348238       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:06.400568       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:18:06.400554386 +0000 UTC m=+427.182390521
I0624 17:18:06.474245       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:06.474499       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:18:06.47446704 +0000 UTC m=+427.256303175
I0624 17:18:06.493870       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:06.505933       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:06.535971       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qktx7" condition "Approved" to 2026-06-24 17:18:06.535960458 +0000 UTC m=+427.317796593
I0624 17:18:06.550035       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qktx7" condition "Ready" to 2026-06-24 17:18:06.550025915 +0000 UTC m=+427.331862060
I0624 17:18:06.561830       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dqszs" condition "Approved" to 2026-06-24 17:18:06.561820314 +0000 UTC m=+427.343656469
I0624 17:18:07.017855       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dqszs" condition "Ready" to 2026-06-24 17:18:07.0178265 +0000 UTC m=+427.799662665
I0624 17:18:07.056282       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:18:07.056267744 +0000 UTC m=+427.838103889
I0624 17:18:07.268410       1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-dqszs" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-4k59f" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1"
I0624 17:18:07.358759       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:07.661147       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-72ms9" condition "Approved" to 2026-06-24 17:18:07.661136854 +0000 UTC m=+428.442972989
I0624 17:18:08.145743       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-72ms9" condition "Ready" to 2026-06-24 17:18:08.145722941 +0000 UTC m=+428.927559126
I0624 17:18:08.405359       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:18:08.405323888 +0000 UTC m=+429.187160053
I0624 17:18:08.455627       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:08.455932       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:18:08.455924795 +0000 UTC m=+429.237760940
I0624 17:18:08.661315       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:17.523493       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls" condition "Ready" to 2026-06-24 17:18:17.523478918 +0000 UTC m=+438.305315063
I0624 17:18:17.524059       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:18:17.524084       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls" condition "Issuing" to 2026-06-24 17:18:17.524079466 +0000 UTC m=+438.305915611
I0624 17:18:17.541619       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:17.541670       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls" condition "Ready" to 2026-06-24 17:18:17.541664481 +0000 UTC m=+438.323500626
I0624 17:18:17.744086       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:17.790579       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5zfqv-p6b8w" condition "Approved" to 2026-06-24 17:18:17.790566066 +0000 UTC m=+438.572402201
I0624 17:18:17.834968       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5zfqv-p6b8w" condition "Ready" to 2026-06-24 17:18:17.834957126 +0000 UTC m=+438.616793261
I0624 17:18:17.865891       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:18:17.865880278 +0000 UTC m=+438.647716413
I0624 17:18:17.892136       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:17.892415       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:18:17.892407639 +0000 UTC m=+438.674243784
I0624 17:18:17.914668       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5zfqv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:30.763980       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:18:30.764009       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 17:18:30.764001573 +0000 UTC m=+451.545837718
I0624 17:18:30.764021       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-24 17:18:30.764004993 +0000 UTC m=+451.545841138
I0624 17:18:30.773558       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:18:30.773627       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:18:30.773660       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 17:18:30.773653195 +0000 UTC m=+451.555489340
I0624 17:18:31.210179       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-krvhn" condition "Approved" to 2026-06-24 17:18:31.210170456 +0000 UTC m=+451.992006591
I0624 17:18:31.227046       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-krvhn" condition "Ready" to 2026-06-24 17:18:31.227036941 +0000 UTC m=+452.008873086
I0624 17:18:31.254970       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:18:31.254959754 +0000 UTC m=+452.036795889
I0624 17:18:31.279014       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:21:49.724801       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 17:21:49.724777986 +0000 UTC m=+650.506614131
I0624 17:21:49.725008       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:21:49.725060       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 17:21:49.725048704 +0000 UTC m=+650.506884879
I0624 17:21:49.747573       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:21:49.747637       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 17:21:49.747630158 +0000 UTC m=+650.529466303
I0624 17:21:49.905702       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:21:49.939204       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6hnc5" condition "Approved" to 2026-06-24 17:21:49.939193356 +0000 UTC m=+650.721029491
I0624 17:21:49.962098       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6hnc5" condition "Ready" to 2026-06-24 17:21:49.962087561 +0000 UTC m=+650.743923706
I0624 17:21:49.983979       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:21:49.983968623 +0000 UTC m=+650.765804758
I0624 17:21:50.005891       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:22:29.983845       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-24 17:22:29.983802322 +0000 UTC m=+690.765638457
I0624 17:22:29.984050       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:22:29.987857       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 17:22:29.987848245 +0000 UTC m=+690.769684400
I0624 17:22:30.000049       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:22:30.000200       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0624 17:22:30.000302       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 17:22:30.000296146 +0000 UTC m=+690.782132291
I0624 17:22:30.195603       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0624 17:22:30.205840       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-24qps" condition "Approved" to 2026-06-24 17:22:30.205825783 +0000 UTC m=+690.987661928
I0624 17:22:30.230236       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-24qps" condition "Ready" to 2026-06-24 17:22:30.230225888 +0000 UTC m=+691.012062023
I0624 17:22:30.265048       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:22:30.265034714 +0000 UTC m=+691.046870849
I0624 17:22:30.284521       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"