I0615 19:54:54.947324 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0615 19:54:54.947473 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0615 19:54:54.947575 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0615 19:54:54.955848 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0615 19:54:54.956248 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0615 19:54:54.956336 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0615 19:54:54.956374 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0615 19:54:54.958590 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0615 19:54:54.975692 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0615 19:54:54.979051 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0615 19:54:54.981639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0615 19:54:54.985742 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0615 19:54:54.988691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0615 19:54:54.991291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0615 19:54:54.993885 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0615 19:54:54.996498 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0615 19:54:54.996592 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0615 19:54:54.999465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0615 19:54:55.001888 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0615 19:54:55.005208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0615 19:54:55.009500 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0615 19:54:55.009533 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0615 19:54:55.009547 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0615 19:54:55.009708 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0615 19:54:55.013377 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0615 19:54:55.017081 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0615 19:54:55.017111 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0615 19:54:55.017203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0615 19:54:55.018889 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0615 19:54:55.020613 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0615 19:54:55.022316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0615 19:54:55.024054 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0615 19:54:55.026027 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0615 19:54:55.028977 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:54:55.030582 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:54:55.035236 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:54:55.046943 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:54:55.060445 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:54:55.080075 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:54:55.119096 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:54:55.122993 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:54:55.134832 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:54:55.147087 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 19:55:08.905958 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-15 19:55:08.905911899 +0000 UTC m=+13.988737227 I0615 19:55:09.652396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:55:09.652475 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 19:55:09.652469643 +0000 UTC m=+14.735294971 I0615 19:55:09.652458 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-15 19:55:09.652419632 +0000 UTC m=+14.735244960 E0615 19:55:09.665282 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 19:55:09.665477 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-15 19:55:09.665467764 +0000 UTC m=+14.748293112 E0615 19:55:09.665625 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 19:55:09.668393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:55:09.668508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:55:09.668598 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 19:55:09.66854952 +0000 UTC m=+14.751374848 E0615 19:55:09.678143 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0615 19:55:09.678243 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 19:55:09.678424 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 19:55:09.678536 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0615 19:55:09.771274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:55:09.772031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4t9cz" condition "Approved" to 2026-06-15 19:55:09.772019632 +0000 UTC m=+14.854844960 I0615 19:55:09.786616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4t9cz" condition "Ready" to 2026-06-15 19:55:09.786598312 +0000 UTC m=+14.869423660 I0615 19:55:09.810969 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:55:09.810830299 +0000 UTC m=+14.893655617 I0615 19:55:09.834840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:55:14.679300 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:55:14.679273875 +0000 UTC m=+19.762099223 I0615 19:55:38.802092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:55:38.802264 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 19:55:38.802202185 +0000 UTC m=+43.885027533 I0615 19:55:38.802473 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-15 19:55:38.802443901 +0000 UTC m=+43.885269219 I0615 19:55:38.816634 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-15 19:55:38.816623368 +0000 UTC m=+43.899448676 I0615 19:55:38.832709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:55:38.832900 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-15 19:55:38.832863357 +0000 UTC m=+43.915688685 I0615 19:55:39.057432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:55:39.094606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-crltj" condition "Approved" to 2026-06-15 19:55:39.094588613 +0000 UTC m=+44.177413941 I0615 19:55:39.132345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-crltj" condition "Ready" to 2026-06-15 19:55:39.132328998 +0000 UTC m=+44.215154356 I0615 19:55:39.176225 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:55:39.176187233 +0000 UTC m=+44.259012571 I0615 19:55:39.200870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:55:39.201513 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:55:39.201503704 +0000 UTC m=+44.284329032 I0615 19:55:39.234642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:59:57.960171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 19:59:57.961801 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-06-15 19:59:57.961764291 +0000 UTC m=+303.044589659 I0615 19:59:57.962202 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-06-15 19:59:57.962193792 +0000 UTC m=+303.045019120 I0615 19:59:57.983433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:59:57.983484 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-06-15 19:59:57.983480307 +0000 UTC m=+303.066305625 I0615 19:59:58.126402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:59:58.150658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-6xmm5" condition "Approved" to 2026-06-15 19:59:58.150649634 +0000 UTC m=+303.233474962 I0615 19:59:58.177434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-6xmm5" condition "Ready" to 2026-06-15 19:59:58.177425409 +0000 UTC m=+303.260250737 I0615 19:59:58.205284 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:59:58.205273324 +0000 UTC m=+303.288098652 I0615 19:59:58.221879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 19:59:58.222159 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 19:59:58.222154357 +0000 UTC m=+303.304979685 I0615 19:59:58.236909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:02.476567 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 20:01:02.476526015 +0000 UTC m=+367.559351343 I0615 20:01:02.476797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:01:02.476834 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-15 20:01:02.476826573 +0000 UTC m=+367.559651891 I0615 20:01:02.491850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:02.491968 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 20:01:02.491956333 +0000 UTC m=+367.574781681 E0615 20:01:02.498903 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 20:01:02.498951 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-15 20:01:02.498941178 +0000 UTC m=+367.581766536 E0615 20:01:02.499082 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 20:01:02.512248 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0615 20:01:02.513340 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 20:01:02.513409 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 20:01:02.513550 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0615 20:01:02.516407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:02.536911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kf2zh" condition "Approved" to 2026-06-15 20:01:02.53688487 +0000 UTC m=+367.619710198 I0615 20:01:02.553868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kf2zh" condition "Ready" to 2026-06-15 20:01:02.553831708 +0000 UTC m=+367.636657056 I0615 20:01:02.576171 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:01:02.576157168 +0000 UTC m=+367.658982496 I0615 20:01:02.594435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:02.594791 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:01:02.59478134 +0000 UTC m=+367.677606668 I0615 20:01:02.609248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:02.609581 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:01:02.60955128 +0000 UTC m=+367.692376608 I0615 20:01:02.614063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:07.512983 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:01:07.512963303 +0000 UTC m=+372.595788651 I0615 20:01:50.891785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:01:50.891845 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-15 20:01:50.891815076 +0000 UTC m=+415.974640394 I0615 20:01:50.892079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:01:50.892105 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-15 20:01:50.892100482 +0000 UTC m=+415.974925800 I0615 20:01:50.892287 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-15 20:01:50.892283008 +0000 UTC m=+415.975108336 I0615 20:01:50.899390 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-15 20:01:50.899385381 +0000 UTC m=+415.982210699 I0615 20:01:50.899542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:01:50.899584 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-15 20:01:50.899573146 +0000 UTC m=+415.982398464 I0615 20:01:50.911477 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-15 20:01:50.911453264 +0000 UTC m=+415.994278622 I0615 20:01:50.945502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:50.945568 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:01:50.945587 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-15 20:01:50.945582149 +0000 UTC m=+416.028407467 I0615 20:01:50.956863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:50.956911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:01:50.956927 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-15 20:01:50.956922503 +0000 UTC m=+416.039747821 I0615 20:01:50.962737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:50.966414 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-15 20:01:50.966407589 +0000 UTC m=+416.049232927 I0615 20:01:51.144748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:51.150090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-442nb" condition "Approved" to 2026-06-15 20:01:51.150075879 +0000 UTC m=+416.232901207 I0615 20:01:51.169815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-442nb" condition "Ready" to 2026-06-15 20:01:51.16979825 +0000 UTC m=+416.252623578 I0615 20:01:51.229911 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:01:51.229894877 +0000 UTC m=+416.312720195 I0615 20:01:51.254425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:51.267831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:51.269364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-68vcb" condition "Approved" to 2026-06-15 20:01:51.2693531 +0000 UTC m=+416.352178428 I0615 20:01:51.310889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wtbv4" condition "Approved" to 2026-06-15 20:01:51.310877776 +0000 UTC m=+416.393703104 I0615 20:01:51.311153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-68vcb" condition "Ready" to 2026-06-15 20:01:51.311113262 +0000 UTC m=+416.393938570 I0615 20:01:51.348241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wtbv4" condition "Ready" to 2026-06-15 20:01:51.348225454 +0000 UTC m=+416.431050772 I0615 20:01:51.867806 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:01:51.867795028 +0000 UTC m=+416.950620356 I0615 20:01:51.940928 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:01:51.940904023 +0000 UTC m=+417.023729341 I0615 20:01:52.031311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:52.031932 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:01:52.031923671 +0000 UTC m=+417.114748999 I0615 20:01:52.179815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:52.180276 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:01:52.180269954 +0000 UTC m=+417.263095282 I0615 20:01:52.524925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:52.630313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:52.681105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:59.385505 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" condition "Ready" to 2026-06-15 20:01:59.385476909 +0000 UTC m=+424.468302237 I0615 20:01:59.385994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:01:59.386014 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" condition "Issuing" to 2026-06-15 20:01:59.386010222 +0000 UTC m=+424.468835550 I0615 20:01:59.400095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:59.400142 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" condition "Ready" to 2026-06-15 20:01:59.400136868 +0000 UTC m=+424.482962186 I0615 20:01:59.927624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:01:59.969767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8nr5k-c6xxm" condition "Approved" to 2026-06-15 20:01:59.969754502 +0000 UTC m=+425.052579830 I0615 20:01:59.993737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8nr5k-c6xxm" condition "Ready" to 2026-06-15 20:01:59.993727592 +0000 UTC m=+425.076552910 I0615 20:02:00.019669 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:02:00.019659902 +0000 UTC m=+425.102485230 I0615 20:02:00.046945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:02:00.047242 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:02:00.047236144 +0000 UTC m=+425.130061462 I0615 20:02:00.065239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:02:00.065709 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:02:00.065699851 +0000 UTC m=+425.148525179 I0615 20:02:00.066712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8nr5k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:02:11.351590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:02:11.351635 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-15 20:02:11.351619068 +0000 UTC m=+436.434444396 I0615 20:02:11.351959 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-15 20:02:11.351952727 +0000 UTC m=+436.434778055 I0615 20:02:11.367577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:02:11.367624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:02:11.367633 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-15 20:02:11.36763055 +0000 UTC m=+436.450455868 I0615 20:02:11.591116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h7k7l" condition "Approved" to 2026-06-15 20:02:11.591103858 +0000 UTC m=+436.673929186 I0615 20:02:11.619019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h7k7l" condition "Ready" to 2026-06-15 20:02:11.619006387 +0000 UTC m=+436.701831715 I0615 20:02:11.651157 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:02:11.651146894 +0000 UTC m=+436.733972212 I0615 20:02:11.668512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:02:11.721388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:05:21.684783 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:05:21.684889 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-15 20:05:21.684857005 +0000 UTC m=+626.767682353 I0615 20:05:21.685354 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-15 20:05:21.685345796 +0000 UTC m=+626.768171154 I0615 20:05:21.702082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:05:21.702211 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-15 20:05:21.702198078 +0000 UTC m=+626.785023406 I0615 20:05:21.962171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:05:22.002464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vxjxl" condition "Approved" to 2026-06-15 20:05:22.002449871 +0000 UTC m=+627.085275229 I0615 20:05:22.021678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vxjxl" condition "Ready" to 2026-06-15 20:05:22.021670022 +0000 UTC m=+627.104495340 I0615 20:05:22.058031 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:05:22.058015572 +0000 UTC m=+627.140840910 I0615 20:05:22.085927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:05:59.938666 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-15 20:05:59.938638642 +0000 UTC m=+665.021463990 I0615 20:05:59.938730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 20:05:59.938975 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 20:05:59.93896257 +0000 UTC m=+665.021787928 I0615 20:05:59.959853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:05:59.960176 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-15 20:05:59.96016534 +0000 UTC m=+665.042990688 I0615 20:06:00.249822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 20:06:00.277776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gt55q" condition "Approved" to 2026-06-15 20:06:00.277762449 +0000 UTC m=+665.360587777 I0615 20:06:00.306555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gt55q" condition "Ready" to 2026-06-15 20:06:00.306535359 +0000 UTC m=+665.389360687 I0615 20:06:00.342729 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 20:06:00.342708203 +0000 UTC m=+665.425533521 I0615 20:06:00.369106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"