I0616 10:20:37.330371 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0616 10:20:37.330570 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0616 10:20:37.330680 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0616 10:20:37.339232 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0616 10:20:37.340198 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0616 10:20:37.340306 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0616 10:20:37.340359 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0616 10:20:37.342917 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0616 10:20:37.355276 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0616 10:20:37.357710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0616 10:20:37.359569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0616 10:20:37.365271 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0616 10:20:37.365648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0616 10:20:37.369082 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0616 10:20:37.371688 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0616 10:20:37.373920 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0616 10:20:37.373950 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0616 10:20:37.373981 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0616 10:20:37.376247 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0616 10:20:37.378235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0616 10:20:37.379962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0616 10:20:37.385857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0616 10:20:37.388975 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0616 10:20:37.391246 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0616 10:20:37.391346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0616 10:20:37.393537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0616 10:20:37.395913 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0616 10:20:37.397680 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0616 10:20:37.399210 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0616 10:20:37.399332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0616 10:20:37.401085 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0616 10:20:37.402894 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0616 10:20:37.403161 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0616 10:20:37.409218 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 10:20:37.410019 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 10:20:37.410355 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 10:20:37.424825 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 10:20:37.440219 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 10:20:37.453943 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 10:20:37.471164 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 10:20:37.492415 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 10:20:37.496998 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 10:20:37.512610 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0616 10:20:50.154764 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-16 10:20:50.154733666 +0000 UTC m=+12.856075323 I0616 10:20:50.889674 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-16 10:20:50.889662163 +0000 UTC m=+13.591003820 I0616 10:20:50.890068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:20:50.890141 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-16 10:20:50.890133929 +0000 UTC m=+13.591475586 E0616 10:20:50.910018 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 10:20:50.910180 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-16 10:20:50.910136312 +0000 UTC m=+13.611477949 E0616 10:20:50.910257 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 10:20:50.914316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:20:50.914513 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:20:50.914676 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-16 10:20:50.914668396 +0000 UTC m=+13.616010043 E0616 10:20:50.918313 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0616 10:20:50.918398 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 10:20:50.918441 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 10:20:50.918466 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0616 10:20:50.948126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:20:50.954331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4966z" condition "Approved" to 2026-06-16 10:20:50.95431719 +0000 UTC m=+13.655658877 I0616 10:20:50.968316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4966z" condition "Ready" to 2026-06-16 10:20:50.968306137 +0000 UTC m=+13.669647794 I0616 10:20:50.991981 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:20:50.991967655 +0000 UTC m=+13.693309312 I0616 10:20:51.011501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:20:51.012194 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:20:51.012185431 +0000 UTC m=+13.713527088 I0616 10:20:51.027783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:20:55.919255 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:20:55.919241482 +0000 UTC m=+18.620583139 I0616 10:21:20.127431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:21:20.127504 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-16 10:21:20.127497635 +0000 UTC m=+42.828839292 I0616 10:21:20.127429 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-16 10:21:20.127411392 +0000 UTC m=+42.828753059 I0616 10:21:20.148186 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-16 10:21:20.148171806 +0000 UTC m=+42.849513473 I0616 10:21:20.153786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:21:20.153870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:21:20.153891 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-16 10:21:20.153885882 +0000 UTC m=+42.855227539 I0616 10:21:20.487126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8vnxq" condition "Approved" to 2026-06-16 10:21:20.487115915 +0000 UTC m=+43.188457582 I0616 10:21:20.527149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8vnxq" condition "Ready" to 2026-06-16 10:21:20.527137523 +0000 UTC m=+43.228479170 I0616 10:21:20.570217 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:21:20.570202829 +0000 UTC m=+43.271544486 I0616 10:21:20.597214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:21:20.597557 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:21:20.597550142 +0000 UTC m=+43.298891789 I0616 10:21:20.622994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:21:20.623267 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:21:20.623260452 +0000 UTC m=+43.324602099 I0616 10:21:20.624376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:26:18.576466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:26:18.576503 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-06-16 10:26:18.576496195 +0000 UTC m=+341.277837852 I0616 10:26:18.577026 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready" to 2026-06-16 10:26:18.57701704 +0000 UTC m=+341.278358697 I0616 10:26:18.595660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:26:18.595726 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready" to 2026-06-16 10:26:18.595718869 +0000 UTC m=+341.297060526 I0616 10:26:18.856668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:26:18.888115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-zq6b8" condition "Approved" to 2026-06-16 10:26:18.888101395 +0000 UTC m=+341.589443052 I0616 10:26:18.919941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-zq6b8" condition "Ready" to 2026-06-16 10:26:18.919929615 +0000 UTC m=+341.621271272 I0616 10:26:18.945643 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:26:18.945631732 +0000 UTC m=+341.646973369 I0616 10:26:18.965867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:26:19.012060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:27:24.809652 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-16 10:27:24.809634735 +0000 UTC m=+407.510976392 I0616 10:27:24.810157 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:27:24.810724 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-16 10:27:24.81067925 +0000 UTC m=+407.512020957 E0616 10:27:24.821042 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 10:27:24.821126 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-16 10:27:24.821118223 +0000 UTC m=+407.522459880 E0616 10:27:24.821149 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0616 10:27:24.824618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:27:24.825675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:27:24.825736 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-16 10:27:24.825730795 +0000 UTC m=+407.527072452 E0616 10:27:24.837444 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0616 10:27:24.837901 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 10:27:24.838012 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0616 10:27:24.838126 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0616 10:27:24.864504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q9cxb" condition "Approved" to 2026-06-16 10:27:24.864487194 +0000 UTC m=+407.565828851 I0616 10:27:24.880822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q9cxb" condition "Ready" to 2026-06-16 10:27:24.880814129 +0000 UTC m=+407.582155786 I0616 10:27:24.899669 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:27:24.899661966 +0000 UTC m=+407.601003623 I0616 10:27:24.921875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:27:29.838442 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:27:29.838392613 +0000 UTC m=+412.539734290 I0616 10:28:14.774942 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-16 10:28:14.774925321 +0000 UTC m=+457.476266988 I0616 10:28:14.775427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:28:14.775517 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-16 10:28:14.775507103 +0000 UTC m=+457.476848780 I0616 10:28:14.780842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:28:14.780860 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-16 10:28:14.780856419 +0000 UTC m=+457.482198066 I0616 10:28:14.781001 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-16 10:28:14.780997592 +0000 UTC m=+457.482339239 I0616 10:28:14.800162 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-16 10:28:14.800147404 +0000 UTC m=+457.501489061 I0616 10:28:14.800500 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:28:14.800532 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-16 10:28:14.800526752 +0000 UTC m=+457.501868399 I0616 10:28:14.822687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:14.822738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:28:14.822754 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-16 10:28:14.822749761 +0000 UTC m=+457.524091408 I0616 10:28:14.844176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:14.844231 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:28:14.844891 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-16 10:28:14.844869507 +0000 UTC m=+457.546211244 I0616 10:28:14.847576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:14.847636 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-16 10:28:14.847630116 +0000 UTC m=+457.548971773 I0616 10:28:15.131040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:15.144799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hv75h" condition "Approved" to 2026-06-16 10:28:15.14478239 +0000 UTC m=+457.846124067 I0616 10:28:15.145355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:15.162878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x9pp7" condition "Approved" to 2026-06-16 10:28:15.162866878 +0000 UTC m=+457.864208535 I0616 10:28:15.163316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:15.176832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hv75h" condition "Ready" to 2026-06-16 10:28:15.176822298 +0000 UTC m=+457.878163945 I0616 10:28:15.186169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wv8rc" condition "Approved" to 2026-06-16 10:28:15.186156539 +0000 UTC m=+457.887498206 I0616 10:28:15.190685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x9pp7" condition "Ready" to 2026-06-16 10:28:15.190674766 +0000 UTC m=+457.892016413 I0616 10:28:15.212432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wv8rc" condition "Ready" to 2026-06-16 10:28:15.212422973 +0000 UTC m=+457.913764630 I0616 10:28:15.273770 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:28:15.273757472 +0000 UTC m=+457.975099109 I0616 10:28:15.367317 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:28:15.367293342 +0000 UTC m=+458.068634999 I0616 10:28:15.519432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:15.566961 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:28:15.566951633 +0000 UTC m=+458.268293280 I0616 10:28:15.665522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:15.666012 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:28:15.666001981 +0000 UTC m=+458.367343668 I0616 10:28:15.817383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:16.122106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:24.071876 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rl59p-tls" condition "Ready" to 2026-06-16 10:28:24.071861698 +0000 UTC m=+466.773203375 I0616 10:28:24.072042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rl59p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:28:24.072082 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rl59p-tls" condition "Issuing" to 2026-06-16 10:28:24.072075222 +0000 UTC m=+466.773416859 I0616 10:28:24.087917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rl59p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rl59p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:24.087990 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rl59p-tls" condition "Ready" to 2026-06-16 10:28:24.087983188 +0000 UTC m=+466.789324825 I0616 10:28:24.208201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rl59p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rl59p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:24.243445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rl59p-vwjkl" condition "Approved" to 2026-06-16 10:28:24.24343445 +0000 UTC m=+466.944776107 I0616 10:28:24.261475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rl59p-vwjkl" condition "Ready" to 2026-06-16 10:28:24.261467221 +0000 UTC m=+466.962808868 I0616 10:28:24.289526 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rl59p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:28:24.289514143 +0000 UTC m=+466.990855790 I0616 10:28:24.310394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rl59p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rl59p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:24.310697 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rl59p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:28:24.31068905 +0000 UTC m=+467.012030707 I0616 10:28:24.331725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rl59p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rl59p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:38.971671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:28:38.971703 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-16 10:28:38.97169574 +0000 UTC m=+481.673037397 I0616 10:28:38.971798 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-16 10:28:38.971654189 +0000 UTC m=+481.672995836 I0616 10:28:38.992532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:38.992731 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-16 10:28:38.992722163 +0000 UTC m=+481.694063840 I0616 10:28:39.213371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:39.244627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jnz5d" condition "Approved" to 2026-06-16 10:28:39.244614207 +0000 UTC m=+481.945955854 I0616 10:28:39.266970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jnz5d" condition "Ready" to 2026-06-16 10:28:39.266961036 +0000 UTC m=+481.968302693 I0616 10:28:39.301837 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:28:39.301823122 +0000 UTC m=+482.003164779 I0616 10:28:39.319944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:28:39.409377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:31:59.343614 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-16 10:31:59.343596233 +0000 UTC m=+682.044937880 I0616 10:31:59.344172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:31:59.344196 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-16 10:31:59.344191993 +0000 UTC m=+682.045533650 I0616 10:31:59.366639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:31:59.366770 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-16 10:31:59.366754954 +0000 UTC m=+682.068096611 I0616 10:31:59.636355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:31:59.666785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gp7zs" condition "Approved" to 2026-06-16 10:31:59.666770482 +0000 UTC m=+682.368112139 I0616 10:31:59.690253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gp7zs" condition "Ready" to 2026-06-16 10:31:59.690240008 +0000 UTC m=+682.391581665 I0616 10:31:59.720166 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:31:59.720155384 +0000 UTC m=+682.421497041 I0616 10:31:59.745131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:31:59.745452 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:31:59.745447181 +0000 UTC m=+682.446788828 I0616 10:31:59.772367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:31:59.772701 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:31:59.772693871 +0000 UTC m=+682.474035518 I0616 10:32:45.450142 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-16 10:32:45.450125144 +0000 UTC m=+728.151466801 I0616 10:32:45.450467 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:32:45.450520 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-16 10:32:45.45051654 +0000 UTC m=+728.151858187 I0616 10:32:45.463636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:32:45.463717 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0616 10:32:45.463741 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-16 10:32:45.46373462 +0000 UTC m=+728.165076267 I0616 10:32:45.785053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:32:45.802651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-l6bqw" condition "Approved" to 2026-06-16 10:32:45.802642466 +0000 UTC m=+728.503984103 I0616 10:32:45.828198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-l6bqw" condition "Ready" to 2026-06-16 10:32:45.82818742 +0000 UTC m=+728.529529067 I0616 10:32:45.867490 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:32:45.867475912 +0000 UTC m=+728.568817569 I0616 10:32:45.899083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:32:45.899465 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:32:45.899455613 +0000 UTC m=+728.600797270 I0616 10:32:45.927661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0616 10:32:45.928109 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-16 10:32:45.928098949 +0000 UTC m=+728.629440606