I0618 15:00:58.570394 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0618 15:00:58.570546 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0618 15:00:58.573772 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0618 15:00:58.573799 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0618 15:00:58.573811 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0618 15:00:58.574257 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0618 15:00:58.574308 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0618 15:00:58.574347 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0618 15:00:58.576893 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0618 15:00:58.590765 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0618 15:00:58.599168 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0618 15:00:58.602074 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0618 15:00:58.604796 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0618 15:00:58.607117 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0618 15:00:58.609301 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0618 15:00:58.613095 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0618 15:00:58.615165 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0618 15:00:58.617109 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0618 15:00:58.619131 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0618 15:00:58.619150 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0618 15:00:58.619286 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0618 15:00:58.621360 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0618 15:00:58.623274 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0618 15:00:58.623410 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0618 15:00:58.625413 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0618 15:00:58.631171 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0618 15:00:58.631209 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0618 15:00:58.631271 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0618 15:00:58.635004 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0618 15:00:58.637709 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0618 15:00:58.639278 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0618 15:00:58.639432 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0618 15:00:58.641265 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0618 15:00:58.643400 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0618 15:00:58.646181 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:00:58.646938 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:00:58.647127 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:00:58.647329 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:00:58.647847 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:00:58.648024 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:00:58.660952 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:00:58.678239 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:00:58.695691 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:00:58.713022 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:00:58.729723 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 15:01:11.381655 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-18 15:01:11.381636921 +0000 UTC m=+12.835978776 I0618 15:01:12.111031 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:01:12.110995 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-18 15:01:12.110947992 +0000 UTC m=+13.565289877 I0618 15:01:12.111104 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-18 15:01:12.111068974 +0000 UTC m=+13.565410859 I0618 15:01:12.133705 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:01:12.133795 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:01:12.133821 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-18 15:01:12.133814699 +0000 UTC m=+13.588156554 E0618 15:01:12.134083 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 15:01:12.134291 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-18 15:01:12.134281137 +0000 UTC m=+13.588622982 E0618 15:01:12.137257 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 15:01:12.145874 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0618 15:01:12.145981 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 15:01:12.151169 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 15:01:12.152436 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0618 15:01:12.164546 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:01:12.175198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-18 15:01:12.175187619 +0000 UTC m=+13.629529474 I0618 15:01:12.196087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-18 15:01:12.196073658 +0000 UTC m=+13.650415543 I0618 15:01:12.216691 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:01:12.216680132 +0000 UTC m=+13.671021987 I0618 15:01:12.229750 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:01:12.262700 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:01:17.147243 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:01:17.14722607 +0000 UTC m=+18.601567945 I0618 15:01:39.323517 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-18 15:01:39.323473917 +0000 UTC m=+40.777815762 I0618 15:01:39.323578 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:01:39.323654 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-18 15:01:39.323645629 +0000 UTC m=+40.777987484 I0618 15:01:39.333987 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-18 15:01:39.333978223 +0000 UTC m=+40.788320068 I0618 15:01:39.336209 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:01:39.336319 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-18 15:01:39.336313229 +0000 UTC m=+40.790655074 I0618 15:01:39.476560 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:01:39.507722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-18 15:01:39.507707499 +0000 UTC m=+40.962049384 I0618 15:01:39.534680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-18 15:01:39.534668115 +0000 UTC m=+40.989009970 I0618 15:01:39.556574 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:01:39.556558191 +0000 UTC m=+41.010900076 I0618 15:01:39.572347 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:01:39.621517 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:05:41.802126 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-75.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:05:41.802264 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-75.nip.io-tls" condition "Issuing" to 2026-06-18 15:05:41.80218227 +0000 UTC m=+283.256524125 I0618 15:05:41.803284 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-75.nip.io-tls" condition "Ready" to 2026-06-18 15:05:41.803276356 +0000 UTC m=+283.257618241 I0618 15:05:41.814879 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:05:41.814963 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-75.nip.io-tls" condition "Ready" to 2026-06-18 15:05:41.814954865 +0000 UTC m=+283.269296720 I0618 15:05:41.928740 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:05:41.961262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-75.nip.io-tls-1" condition "Approved" to 2026-06-18 15:05:41.961246541 +0000 UTC m=+283.415588406 I0618 15:05:41.975432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-75.nip.io-tls-1" condition "Ready" to 2026-06-18 15:05:41.97542207 +0000 UTC m=+283.429763925 I0618 15:05:41.995660 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-75.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:05:41.995646661 +0000 UTC m=+283.449988536 I0618 15:05:42.008069 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:05:42.009224 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-75.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:05:42.00921862 +0000 UTC m=+283.463560465 I0618 15:05:42.020058 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:05:42.022325 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:06:45.024014 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-18 15:06:45.023991601 +0000 UTC m=+346.478333456 I0618 15:06:45.024581 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:06:45.024654 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-18 15:06:45.024641176 +0000 UTC m=+346.478983061 E0618 15:06:45.033769 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 15:06:45.033937 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-18 15:06:45.033858433 +0000 UTC m=+346.488200318 E0618 15:06:45.034036 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 15:06:45.034163 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:06:45.034242 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:06:45.034266 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-18 15:06:45.034259533 +0000 UTC m=+346.488601388 E0618 15:06:45.040596 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0618 15:06:45.040775 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 15:06:45.040812 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 15:06:45.040907 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0618 15:06:45.071205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-18 15:06:45.071190467 +0000 UTC m=+346.525532322 I0618 15:06:45.083389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-18 15:06:45.083379536 +0000 UTC m=+346.537721381 I0618 15:06:45.104600 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:06:45.104408192 +0000 UTC m=+346.558750047 I0618 15:06:45.123430 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:06:45.124362 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:06:45.12435233 +0000 UTC m=+346.578694185 I0618 15:06:45.138666 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:06:45.138980 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:06:45.138971118 +0000 UTC m=+346.593312973 I0618 15:06:50.041727 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:06:50.04171439 +0000 UTC m=+351.496056245 I0618 15:07:30.056878 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-18 15:07:30.056832651 +0000 UTC m=+391.511174506 I0618 15:07:30.057449 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:07:30.063517 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-18 15:07:30.063506242 +0000 UTC m=+391.517848087 I0618 15:07:30.060387 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-18 15:07:30.060377456 +0000 UTC m=+391.514719301 I0618 15:07:30.060343 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:07:30.060460 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:07:30.060484 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-18 15:07:30.060480598 +0000 UTC m=+391.514822443 I0618 15:07:30.066742 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-18 15:07:30.06673567 +0000 UTC m=+391.521077535 I0618 15:07:30.066779 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-18 15:07:30.066776231 +0000 UTC m=+391.521118076 I0618 15:07:30.096128 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:30.103404 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-18 15:07:30.103379818 +0000 UTC m=+391.557721733 I0618 15:07:30.126443 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:30.126528 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:07:30.126555 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-18 15:07:30.12654917 +0000 UTC m=+391.580891015 I0618 15:07:30.134598 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:30.134822 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:07:30.134872 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-18 15:07:30.134866496 +0000 UTC m=+391.589208351 I0618 15:07:30.328349 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:30.365497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-18 15:07:30.365484243 +0000 UTC m=+391.819826088 I0618 15:07:30.377687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-18 15:07:30.377678081 +0000 UTC m=+391.832019926 I0618 15:07:30.390726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-18 15:07:30.390715699 +0000 UTC m=+391.845057564 I0618 15:07:30.393261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-18 15:07:30.393251613 +0000 UTC m=+391.847593478 I0618 15:07:30.413637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-18 15:07:30.413628385 +0000 UTC m=+391.867970230 I0618 15:07:30.432125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-18 15:07:30.432117526 +0000 UTC m=+391.886459371 I0618 15:07:30.467538 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:07:30.467524518 +0000 UTC m=+391.921866373 I0618 15:07:30.503240 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:07:30.503228117 +0000 UTC m=+391.957569982 I0618 15:07:30.744109 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:30.745098 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:07:30.745087972 +0000 UTC m=+392.199429837 I0618 15:07:30.864752 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:30.871046 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:07:30.871031795 +0000 UTC m=+392.325373650 I0618 15:07:30.950604 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:07:30.950594495 +0000 UTC m=+392.404936340 I0618 15:07:31.266473 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:07:31.266461404 +0000 UTC m=+392.720803259 I0618 15:07:31.458233 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:31.459260 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:07:31.459248625 +0000 UTC m=+392.913590500 I0618 15:07:31.472403 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:31.498897 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:31.548929 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:31.597087 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:31.946291 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:31.996681 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:39.268143 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls" condition "Ready" to 2026-06-18 15:07:39.268130261 +0000 UTC m=+400.722472126 I0618 15:07:39.268601 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:07:39.269272 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls" condition "Issuing" to 2026-06-18 15:07:39.268620411 +0000 UTC m=+400.722962276 I0618 15:07:39.280680 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:39.280755 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:07:39.280820 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls" condition "Issuing" to 2026-06-18 15:07:39.280767012 +0000 UTC m=+400.735108867 I0618 15:07:39.430145 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:39.447046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls-1" condition "Approved" to 2026-06-18 15:07:39.447031435 +0000 UTC m=+400.901373300 I0618 15:07:39.466118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls-1" condition "Ready" to 2026-06-18 15:07:39.466097739 +0000 UTC m=+400.920439624 I0618 15:07:39.496686 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:07:39.496674392 +0000 UTC m=+400.951016247 I0618 15:07:39.510281 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p2xcb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:53.799528 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-18 15:07:53.799497177 +0000 UTC m=+415.253839022 I0618 15:07:53.802255 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:07:53.802297 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-18 15:07:53.802292693 +0000 UTC m=+415.256634548 I0618 15:07:53.810052 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:53.810126 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:07:53.810149 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-18 15:07:53.810143289 +0000 UTC m=+415.264485134 I0618 15:07:54.011957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-18 15:07:54.011943845 +0000 UTC m=+415.466285700 I0618 15:07:54.043980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-18 15:07:54.043962972 +0000 UTC m=+415.498304867 I0618 15:07:54.081037 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:07:54.081021539 +0000 UTC m=+415.535363394 I0618 15:07:54.098799 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:54.100593 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:07:54.100585379 +0000 UTC m=+415.554927224 I0618 15:07:54.113494 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:07:54.114781 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:11:18.853720 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-18 15:11:18.853697814 +0000 UTC m=+620.308039719 I0618 15:11:18.854053 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:11:18.854121 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-18 15:11:18.85411408 +0000 UTC m=+620.308455935 I0618 15:11:18.868635 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:11:18.868683 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:11:18.868700 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-18 15:11:18.868693665 +0000 UTC m=+620.323035510 I0618 15:11:19.092121 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:11:19.104406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-18 15:11:19.104392429 +0000 UTC m=+620.558734284 I0618 15:11:19.117869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-18 15:11:19.117858187 +0000 UTC m=+620.572200042 I0618 15:11:19.145040 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:11:19.145011229 +0000 UTC m=+620.599353094 I0618 15:11:19.160658 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:11:19.162242 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:11:19.162227833 +0000 UTC m=+620.616569668 I0618 15:11:19.168923 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:11:19.179006 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:12:02.112318 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 15:12:02.112350 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-18 15:12:02.112342583 +0000 UTC m=+663.566684438 I0618 15:12:02.112897 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-18 15:12:02.112891501 +0000 UTC m=+663.567233356 I0618 15:12:02.125579 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:12:02.125860 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-18 15:12:02.125852338 +0000 UTC m=+663.580194193 I0618 15:12:02.372859 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:12:02.419223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-18 15:12:02.419209254 +0000 UTC m=+663.873551089 I0618 15:12:02.435388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-18 15:12:02.435375836 +0000 UTC m=+663.889717691 I0618 15:12:02.473867 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:12:02.473848421 +0000 UTC m=+663.928190306 I0618 15:12:02.492428 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 15:12:02.493247 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 15:12:02.49323864 +0000 UTC m=+663.947580495 I0618 15:12:02.508594 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"