I0625 22:16:47.991135 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0625 22:16:47.991289 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0625 22:16:47.991458 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0625 22:16:47.999256 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0625 22:16:47.999743 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0625 22:16:47.999782 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0625 22:16:47.999861 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0625 22:16:48.002516 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0625 22:16:48.023999 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0625 22:16:48.029749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0625 22:16:48.032483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0625 22:16:48.034919 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0625 22:16:48.042178 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0625 22:16:48.042231 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0625 22:16:48.046391 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0625 22:16:48.049122 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0625 22:16:48.053319 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0625 22:16:48.057477 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0625 22:16:48.061478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0625 22:16:48.063519 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0625 22:16:48.063595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0625 22:16:48.068893 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0625 22:16:48.069199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0625 22:16:48.073226 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0625 22:16:48.075753 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0625 22:16:48.078387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0625 22:16:48.080929 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0625 22:16:48.080959 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0625 22:16:48.081098 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0625 22:16:48.083225 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0625 22:16:48.085045 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0625 22:16:48.086755 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0625 22:16:48.087453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0625 22:16:48.090994 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:16:48.091384 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:16:48.091706 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:16:48.091872 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:16:48.091899 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:16:48.092011 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:16:48.092224 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:16:48.092408 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:16:48.093104 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:16:48.180720 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0625 22:17:00.875273 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-25 22:17:00.875256336 +0000 UTC m=+12.917334329 I0625 22:17:01.957514 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-25 22:17:01.957490587 +0000 UTC m=+13.999568630 I0625 22:17:01.957700 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:17:01.957861 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-25 22:17:01.957846874 +0000 UTC m=+13.999924897 I0625 22:17:02.245665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:17:02.245792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:17:02.245817 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-25 22:17:02.245808823 +0000 UTC m=+14.287886806 E0625 22:17:02.321038 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0625 22:17:02.321145 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-25 22:17:02.321132445 +0000 UTC m=+14.363210458 E0625 22:17:02.321179 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0625 22:17:02.397840 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0625 22:17:02.398283 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0625 22:17:02.398349 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0625 22:17:02.398453 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0625 22:17:02.726967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rk65r" condition "Approved" to 2026-06-25 22:17:02.726928201 +0000 UTC m=+14.769006224 I0625 22:17:02.745187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rk65r" condition "Ready" to 2026-06-25 22:17:02.745174802 +0000 UTC m=+14.787252795 I0625 22:17:02.772168 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:17:02.77215511 +0000 UTC m=+14.814233093 I0625 22:17:02.790737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:17:07.398376 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:17:07.398358861 +0000 UTC m=+19.440436844 I0625 22:17:31.458174 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-25 22:17:31.458144025 +0000 UTC m=+43.500222018 I0625 22:17:31.458729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:17:31.458777 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-25 22:17:31.458767505 +0000 UTC m=+43.500845498 I0625 22:17:31.512302 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-25 22:17:31.512292587 +0000 UTC m=+43.554370580 I0625 22:17:31.522352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:17:31.522441 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:17:31.522469 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-25 22:17:31.522461186 +0000 UTC m=+43.564539179 I0625 22:17:31.761665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:17:32.259708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zh8v8" condition "Approved" to 2026-06-25 22:17:32.259687563 +0000 UTC m=+44.301765556 I0625 22:17:33.086645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zh8v8" condition "Ready" to 2026-06-25 22:17:33.08663017 +0000 UTC m=+45.128708193 I0625 22:17:33.444958 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:17:33.444947234 +0000 UTC m=+45.487025217 I0625 22:17:33.784663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:17:33.785116 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:17:33.7851075 +0000 UTC m=+45.827185483 I0625 22:17:34.282984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:22:38.923128 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-24.nip.io-tls" condition "Ready" to 2026-06-25 22:22:38.923083502 +0000 UTC m=+350.965161485 I0625 22:22:38.923667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-24.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:22:38.923717 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-24.nip.io-tls" condition "Issuing" to 2026-06-25 22:22:38.923706782 +0000 UTC m=+350.965784795 I0625 22:22:38.942001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-24.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-24.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:22:38.942056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-24.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:22:38.942074 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-24.nip.io-tls" condition "Issuing" to 2026-06-25 22:22:38.942068971 +0000 UTC m=+350.984146974 I0625 22:22:39.054925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-24.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-24.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:22:39.058904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-24.nip.io-tls-ls7mt" condition "Approved" to 2026-06-25 22:22:39.05888919 +0000 UTC m=+351.100967183 I0625 22:22:39.094697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-24.nip.io-tls-ls7mt" condition "Ready" to 2026-06-25 22:22:39.094665422 +0000 UTC m=+351.136743425 I0625 22:22:39.123234 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-24.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:22:39.123215266 +0000 UTC m=+351.165293259 I0625 22:22:39.143505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-24.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-24.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:22:39.144051 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-24.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:22:39.144041595 +0000 UTC m=+351.186119588 I0625 22:22:39.166625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-24.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-24.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:23:45.484363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:23:45.484457 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-25 22:23:45.484443972 +0000 UTC m=+417.526521975 I0625 22:23:45.484800 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-25 22:23:45.484774467 +0000 UTC m=+417.526852490 E0625 22:23:45.498887 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0625 22:23:45.499106 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-25 22:23:45.499092172 +0000 UTC m=+417.541170165 E0625 22:23:45.499187 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0625 22:23:45.502807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:23:45.502911 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-25 22:23:45.502901694 +0000 UTC m=+417.544979677 E0625 22:23:45.518567 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0625 22:23:45.518928 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0625 22:23:45.518966 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0625 22:23:45.519023 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0625 22:23:45.523210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:23:45.545688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ltpjc" condition "Approved" to 2026-06-25 22:23:45.545662565 +0000 UTC m=+417.587740658 I0625 22:23:45.559421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ltpjc" condition "Ready" to 2026-06-25 22:23:45.55940421 +0000 UTC m=+417.601482233 I0625 22:23:45.583392 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:23:45.583381643 +0000 UTC m=+417.625459636 I0625 22:23:45.604539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:23:45.605449 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:23:45.605440515 +0000 UTC m=+417.647518508 I0625 22:23:45.625345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:23:50.519982 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:23:50.51996518 +0000 UTC m=+422.562043193 I0625 22:24:34.274571 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-25 22:24:34.27452289 +0000 UTC m=+466.316600873 I0625 22:24:34.274919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:34.274883 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-25 22:24:34.274863775 +0000 UTC m=+466.316941768 I0625 22:24:34.274967 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-25 22:24:34.274959047 +0000 UTC m=+466.317037030 I0625 22:24:34.272630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:34.275385 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-25 22:24:34.275379913 +0000 UTC m=+466.317457906 I0625 22:24:34.282342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:34.282370 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-25 22:24:34.282364698 +0000 UTC m=+466.324442671 I0625 22:24:34.282046 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-25 22:24:34.282036853 +0000 UTC m=+466.324114826 I0625 22:24:34.453426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:34.454554 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-25 22:24:34.454540619 +0000 UTC m=+466.496618602 I0625 22:24:34.459576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:34.460035 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-25 22:24:34.460021679 +0000 UTC m=+466.502099682 I0625 22:24:34.460102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:34.460170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:34.460193 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-25 22:24:34.460188152 +0000 UTC m=+466.502266135 I0625 22:24:34.792206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:34.835532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8t9kz" condition "Approved" to 2026-06-25 22:24:34.835518424 +0000 UTC m=+466.877596407 I0625 22:24:34.866578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-78462" condition "Approved" to 2026-06-25 22:24:34.866563164 +0000 UTC m=+466.908641147 I0625 22:24:34.876847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8t9kz" condition "Ready" to 2026-06-25 22:24:34.876835414 +0000 UTC m=+466.918913387 I0625 22:24:34.903333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:34.906827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-78462" condition "Ready" to 2026-06-25 22:24:34.906819326 +0000 UTC m=+466.948897309 I0625 22:24:34.923721 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:34.923694334 +0000 UTC m=+466.965772317 I0625 22:24:34.943825 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:34.943809485 +0000 UTC m=+466.985887478 I0625 22:24:34.948317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8jlq7" condition "Approved" to 2026-06-25 22:24:34.948303039 +0000 UTC m=+466.990381072 I0625 22:24:34.961234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:34.962929 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:34.962918299 +0000 UTC m=+467.004996272 I0625 22:24:34.967380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8jlq7" condition "Ready" to 2026-06-25 22:24:34.967373011 +0000 UTC m=+467.009450994 I0625 22:24:34.971291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:35.251932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:35.252532 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:35.252521171 +0000 UTC m=+467.294599164 I0625 22:24:35.559217 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:35.559199684 +0000 UTC m=+467.601277667 I0625 22:24:35.717483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:35.718013 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:35.718003266 +0000 UTC m=+467.760081259 I0625 22:24:36.102644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:36.150713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:47.019054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fnknb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:47.019104 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fnknb-tls" condition "Issuing" to 2026-06-25 22:24:47.019091156 +0000 UTC m=+479.061169169 I0625 22:24:47.019555 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fnknb-tls" condition "Ready" to 2026-06-25 22:24:47.019542323 +0000 UTC m=+479.061620336 I0625 22:24:47.047176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fnknb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fnknb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:47.047262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fnknb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:24:47.047287 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fnknb-tls" condition "Issuing" to 2026-06-25 22:24:47.04728001 +0000 UTC m=+479.089358003 I0625 22:24:47.305706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fnknb-p5qsf" condition "Approved" to 2026-06-25 22:24:47.305693633 +0000 UTC m=+479.347771616 I0625 22:24:47.326781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fnknb-p5qsf" condition "Ready" to 2026-06-25 22:24:47.326768449 +0000 UTC m=+479.368846442 I0625 22:24:47.372336 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fnknb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:47.372316998 +0000 UTC m=+479.414394981 I0625 22:24:47.557870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fnknb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fnknb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:24:47.558430 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fnknb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:24:47.558419061 +0000 UTC m=+479.600497074 I0625 22:24:47.801064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fnknb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fnknb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:25:05.333198 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:25:05.333241 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-25 22:25:05.333225462 +0000 UTC m=+497.375303435 I0625 22:25:05.333248 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-25 22:25:05.333232002 +0000 UTC m=+497.375309995 I0625 22:25:05.352230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:25:05.352325 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-25 22:25:05.352316407 +0000 UTC m=+497.394394400 I0625 22:25:05.659287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:25:05.698137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tvf7b" condition "Approved" to 2026-06-25 22:25:05.698117032 +0000 UTC m=+497.740195025 I0625 22:25:05.718889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tvf7b" condition "Ready" to 2026-06-25 22:25:05.718874795 +0000 UTC m=+497.760952788 I0625 22:25:05.755819 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:25:05.755801512 +0000 UTC m=+497.797879505 I0625 22:25:05.780616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:25:05.781062 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:25:05.781053378 +0000 UTC m=+497.823131381 I0625 22:25:05.803434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:25:05.803671 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:25:05.80366487 +0000 UTC m=+497.845742853 I0625 22:28:34.616844 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-25 22:28:34.616798361 +0000 UTC m=+706.658876344 I0625 22:28:34.618483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:28:34.618587 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-25 22:28:34.61858078 +0000 UTC m=+706.660658753 I0625 22:28:34.659943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:28:34.660002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:28:34.660018 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-25 22:28:34.660012039 +0000 UTC m=+706.702090012 I0625 22:28:35.229470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j5t76" condition "Approved" to 2026-06-25 22:28:35.229454495 +0000 UTC m=+707.271532488 I0625 22:28:35.249999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j5t76" condition "Ready" to 2026-06-25 22:28:35.249989976 +0000 UTC m=+707.292067959 I0625 22:28:35.288349 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:28:35.288330627 +0000 UTC m=+707.330408650 I0625 22:28:35.310588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:28:35.310995 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:28:35.310982774 +0000 UTC m=+707.353060767 I0625 22:28:35.322868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:28:35.333985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:29:18.241625 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-25 22:29:18.241610834 +0000 UTC m=+750.283688827 I0625 22:29:18.241877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0625 22:29:18.242002 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-25 22:29:18.241997972 +0000 UTC m=+750.284075965 I0625 22:29:18.259495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:29:18.259553 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-25 22:29:18.259547855 +0000 UTC m=+750.301625848 I0625 22:29:18.628366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:29:18.663443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2xbbd" condition "Approved" to 2026-06-25 22:29:18.663429656 +0000 UTC m=+750.705507649 I0625 22:29:18.685391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2xbbd" condition "Ready" to 2026-06-25 22:29:18.685376043 +0000 UTC m=+750.727454036 I0625 22:29:18.720598 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:29:18.72058467 +0000 UTC m=+750.762662643 I0625 22:29:18.747522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:29:18.749454 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 22:29:18.749436112 +0000 UTC m=+750.791514095 I0625 22:29:18.754242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0625 22:29:18.767742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"