I0618 03:14:47.820971 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0618 03:14:47.821088 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0618 03:14:47.821233 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0618 03:14:47.828424 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0618 03:14:47.828999 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0618 03:14:47.829072 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0618 03:14:47.829102 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0618 03:14:47.833055 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0618 03:14:47.847593 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0618 03:14:47.850916 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0618 03:14:47.850999 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0618 03:14:47.854509 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0618 03:14:47.859651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0618 03:14:47.862016 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0618 03:14:47.863709 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0618 03:14:47.863727 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0618 03:14:47.863860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0618 03:14:47.865622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0618 03:14:47.867613 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0618 03:14:47.869529 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0618 03:14:47.871247 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0618 03:14:47.871281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0618 03:14:47.873210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0618 03:14:47.879252 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0618 03:14:47.883899 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0618 03:14:47.887661 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0618 03:14:47.887886 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0618 03:14:47.889600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0618 03:14:47.891429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0618 03:14:47.893287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0618 03:14:47.895198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0618 03:14:47.897000 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0618 03:14:47.897719 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0618 03:14:47.903086 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 03:14:47.903579 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 03:14:47.904186 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 03:14:47.905237 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 03:14:47.906209 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 03:14:47.906794 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 03:14:47.907131 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 03:14:47.907204 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 03:14:47.908051 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 03:14:47.990501 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 03:14:59.752579 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-18 03:14:59.752560033 +0000 UTC m=+11.963974398 I0618 03:15:00.425425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:15:00.425473 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-18 03:15:00.425463164 +0000 UTC m=+12.636877519 I0618 03:15:00.426650 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-18 03:15:00.426639992 +0000 UTC m=+12.638054387 E0618 03:15:00.440082 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 03:15:00.440132 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-18 03:15:00.440126395 +0000 UTC m=+12.651540730 E0618 03:15:00.440552 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 03:15:00.442469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:15:00.442517 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-18 03:15:00.442512682 +0000 UTC m=+12.653927017 E0618 03:15:00.453257 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0618 03:15:00.453355 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 03:15:00.453382 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 03:15:00.453529 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0618 03:15:00.459687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:15:00.517037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hr2br" condition "Approved" to 2026-06-18 03:15:00.517021608 +0000 UTC m=+12.728435963 I0618 03:15:00.591238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hr2br" condition "Ready" to 2026-06-18 03:15:00.591222536 +0000 UTC m=+12.802636891 I0618 03:15:00.638405 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:15:00.638392836 +0000 UTC m=+12.849807191 I0618 03:15:00.683701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:15:00.684000 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:15:00.683993638 +0000 UTC m=+12.895407963 I0618 03:15:00.723464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:15:05.454662 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:15:05.454635122 +0000 UTC m=+17.666049487 I0618 03:15:30.204314 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-18 03:15:30.204248194 +0000 UTC m=+42.415662549 I0618 03:15:30.204385 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:15:30.204820 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-18 03:15:30.204452069 +0000 UTC m=+42.415866434 I0618 03:15:30.225288 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-18 03:15:30.225269826 +0000 UTC m=+42.436684151 I0618 03:15:30.248054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:15:30.248141 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:15:30.248171 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-18 03:15:30.248160929 +0000 UTC m=+42.459575294 I0618 03:15:31.078900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pbckm" condition "Approved" to 2026-06-18 03:15:31.07888998 +0000 UTC m=+43.290304315 I0618 03:15:31.379831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pbckm" condition "Ready" to 2026-06-18 03:15:31.37982039 +0000 UTC m=+43.591234725 I0618 03:15:31.461618 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:15:31.461601926 +0000 UTC m=+43.673016261 I0618 03:15:31.502794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:15:31.503120 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:15:31.503113887 +0000 UTC m=+43.714528222 I0618 03:15:31.512683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:15:31.538163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:19:44.873023 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-06-18 03:19:44.873004341 +0000 UTC m=+297.084418696 I0618 03:19:44.873113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:19:44.873147 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-06-18 03:19:44.873139164 +0000 UTC m=+297.084553499 I0618 03:19:44.891402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:19:44.891447 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-06-18 03:19:44.891441885 +0000 UTC m=+297.102856210 I0618 03:19:45.327163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:19:45.389973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-xg7br" condition "Approved" to 2026-06-18 03:19:45.38995847 +0000 UTC m=+297.601372825 I0618 03:19:45.422244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-xg7br" condition "Ready" to 2026-06-18 03:19:45.422230912 +0000 UTC m=+297.633645257 I0618 03:19:45.445542 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:19:45.445530237 +0000 UTC m=+297.656944562 I0618 03:19:45.470381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:19:45.470937 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:19:45.470927741 +0000 UTC m=+297.682342096 I0618 03:19:45.486354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:19:45.487531 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:19:45.487519964 +0000 UTC m=+297.698934319 I0618 03:20:48.926538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:20:48.926594 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-18 03:20:48.926583254 +0000 UTC m=+361.137997619 I0618 03:20:48.926635 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-18 03:20:48.926613954 +0000 UTC m=+361.138028309 E0618 03:20:48.944771 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 03:20:48.944806 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-18 03:20:48.944798748 +0000 UTC m=+361.156213083 E0618 03:20:48.944853 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 03:20:48.946527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:20:48.946757 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-18 03:20:48.946747266 +0000 UTC m=+361.158161601 I0618 03:20:48.958665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0618 03:20:48.958956 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0618 03:20:48.959398 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 03:20:48.959555 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 03:20:48.959650 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0618 03:20:48.962723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:20:48.962776 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-18 03:20:48.962769237 +0000 UTC m=+361.174183572 I0618 03:20:48.963506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gj66d" condition "Approved" to 2026-06-18 03:20:48.963489874 +0000 UTC m=+361.174904209 I0618 03:20:48.977791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gj66d" condition "Ready" to 2026-06-18 03:20:48.977778783 +0000 UTC m=+361.189193118 I0618 03:20:48.997166 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:20:48.997153455 +0000 UTC m=+361.208567790 I0618 03:20:49.011539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:20:49.055683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:20:53.960043 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:20:53.960002172 +0000 UTC m=+366.171416537 I0618 03:21:37.088529 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-18 03:21:37.088508577 +0000 UTC m=+409.299922922 I0618 03:21:37.089111 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-18 03:21:37.08910465 +0000 UTC m=+409.300518985 I0618 03:21:37.089488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:21:37.089529 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-18 03:21:37.08951021 +0000 UTC m=+409.300924545 I0618 03:21:37.090497 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:21:37.090526 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-18 03:21:37.090520203 +0000 UTC m=+409.301934538 I0618 03:21:37.090847 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-18 03:21:37.09083417 +0000 UTC m=+409.302248485 I0618 03:21:37.091893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:21:37.092383 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-18 03:21:37.092375886 +0000 UTC m=+409.303790231 I0618 03:21:37.123216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:37.123261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:21:37.123276 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-18 03:21:37.123271214 +0000 UTC m=+409.334685539 I0618 03:21:37.123707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:37.123795 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-18 03:21:37.123787276 +0000 UTC m=+409.335201621 I0618 03:21:37.132364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:37.132532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:21:37.132592 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-18 03:21:37.132584898 +0000 UTC m=+409.343999233 I0618 03:21:37.413886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:37.430312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tqc9s" condition "Approved" to 2026-06-18 03:21:37.430303159 +0000 UTC m=+409.641717474 I0618 03:21:37.449750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tqc9s" condition "Ready" to 2026-06-18 03:21:37.449742235 +0000 UTC m=+409.661156560 I0618 03:21:37.478826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hd49x" condition "Approved" to 2026-06-18 03:21:37.478814422 +0000 UTC m=+409.690228757 I0618 03:21:37.492931 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:21:37.492922336 +0000 UTC m=+409.704336661 I0618 03:21:37.508676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hd49x" condition "Ready" to 2026-06-18 03:21:37.508665947 +0000 UTC m=+409.720080272 I0618 03:21:37.533937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:37.548263 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:21:37.548256716 +0000 UTC m=+409.759671041 I0618 03:21:37.573905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:37.574277 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:21:37.574270202 +0000 UTC m=+409.785684537 I0618 03:21:37.717178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:37.767618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:37.860876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:37.960763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:38.116056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2tv26" condition "Approved" to 2026-06-18 03:21:38.11604646 +0000 UTC m=+410.327460785 I0618 03:21:38.177808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2tv26" condition "Ready" to 2026-06-18 03:21:38.177797405 +0000 UTC m=+410.389211730 I0618 03:21:38.664358 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:21:38.664340427 +0000 UTC m=+410.875754792 I0618 03:21:38.764017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:38.764422 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:21:38.76441562 +0000 UTC m=+410.975829955 I0618 03:21:38.963058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:45.809685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-42lw6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:21:45.810098 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-42lw6-tls" condition "Issuing" to 2026-06-18 03:21:45.810087528 +0000 UTC m=+418.021501883 I0618 03:21:45.810037 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-42lw6-tls" condition "Ready" to 2026-06-18 03:21:45.810025048 +0000 UTC m=+418.021439393 I0618 03:21:45.828065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-42lw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-42lw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:45.828638 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-42lw6-tls" condition "Ready" to 2026-06-18 03:21:45.828120119 +0000 UTC m=+418.039534444 I0618 03:21:45.928410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-42lw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-42lw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:45.961460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-42lw6-6lhkp" condition "Approved" to 2026-06-18 03:21:45.961448273 +0000 UTC m=+418.172862598 I0618 03:21:45.980329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-42lw6-6lhkp" condition "Ready" to 2026-06-18 03:21:45.980320552 +0000 UTC m=+418.191734877 I0618 03:21:46.174319 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-42lw6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:21:46.174306992 +0000 UTC m=+418.385721317 I0618 03:21:46.194005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-42lw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-42lw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:46.247454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-42lw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-42lw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:58.292986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:21:58.293013 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-18 03:21:58.293007567 +0000 UTC m=+430.504421892 I0618 03:21:58.293464 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-18 03:21:58.293460177 +0000 UTC m=+430.504874502 I0618 03:21:58.324798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:58.324874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:21:58.324889 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-18 03:21:58.324884453 +0000 UTC m=+430.536298778 I0618 03:21:58.522567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:58.525167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pwnbf" condition "Approved" to 2026-06-18 03:21:58.525155284 +0000 UTC m=+430.736569609 I0618 03:21:58.546400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pwnbf" condition "Ready" to 2026-06-18 03:21:58.546385912 +0000 UTC m=+430.757800277 I0618 03:21:58.586773 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:21:58.586726458 +0000 UTC m=+430.798140783 I0618 03:21:58.611498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:21:58.672999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:25:23.197867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:25:23.197924 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-18 03:25:23.197912222 +0000 UTC m=+635.409326577 I0618 03:25:23.197956 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-18 03:25:23.197939502 +0000 UTC m=+635.409353857 I0618 03:25:23.216777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:25:23.216873 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-18 03:25:23.216867439 +0000 UTC m=+635.428281764 I0618 03:25:23.277809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:25:23.312339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-np9bd" condition "Approved" to 2026-06-18 03:25:23.312329093 +0000 UTC m=+635.523743428 I0618 03:25:23.329145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-np9bd" condition "Ready" to 2026-06-18 03:25:23.329134316 +0000 UTC m=+635.540548651 I0618 03:25:23.356343 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:25:23.3563313 +0000 UTC m=+635.567745615 I0618 03:25:23.374271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:26:05.560856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:26:05.561145 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-18 03:26:05.561117823 +0000 UTC m=+677.772532178 I0618 03:26:05.560890 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-18 03:26:05.560881889 +0000 UTC m=+677.772296224 I0618 03:26:05.577703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:26:05.577974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 03:26:05.578002 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-18 03:26:05.577995455 +0000 UTC m=+677.789409790 I0618 03:26:06.092867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:26:06.106287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xwbzt" condition "Approved" to 2026-06-18 03:26:06.10627769 +0000 UTC m=+678.317692025 I0618 03:26:06.129156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xwbzt" condition "Ready" to 2026-06-18 03:26:06.129148062 +0000 UTC m=+678.340562377 I0618 03:26:06.153179 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 03:26:06.153165778 +0000 UTC m=+678.364580113 I0618 03:26:06.180083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 03:26:06.242790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"