I0618 12:32:07.035332 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0618 12:32:07.035865 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0618 12:32:07.043427 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0618 12:32:07.043448 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0618 12:32:07.043458 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0618 12:32:07.043826 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0618 12:32:07.043877 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0618 12:32:07.043935 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0618 12:32:07.045931 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0618 12:32:07.058371 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0618 12:32:07.061782 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0618 12:32:07.066683 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0618 12:32:07.069356 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0618 12:32:07.071948 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0618 12:32:07.074331 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0618 12:32:07.074400 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0618 12:32:07.074517 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0618 12:32:07.074570 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0618 12:32:07.074599 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0618 12:32:07.078641 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0618 12:32:07.078683 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0618 12:32:07.082860 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0618 12:32:07.085566 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0618 12:32:07.088119 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0618 12:32:07.091001 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0618 12:32:07.093569 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0618 12:32:07.097855 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0618 12:32:07.102939 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0618 12:32:07.106518 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0618 12:32:07.109693 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0618 12:32:07.112953 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0618 12:32:07.116229 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0618 12:32:07.118424 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0618 12:32:07.119004 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0618 12:32:07.121438 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:07.121788 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:07.121828 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:07.122701 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:07.124408 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:07.142681 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:07.160884 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:07.176197 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:07.193224 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:07.207413 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:07.225809 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0618 12:32:17.712995 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-18 12:32:17.712961516 +0000 UTC m=+10.704531035 I0618 12:32:18.446393 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:32:18.446447 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-18 12:32:18.446441164 +0000 UTC m=+11.438010643 I0618 12:32:18.446428 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-18 12:32:18.446415644 +0000 UTC m=+11.437985143 E0618 12:32:18.460975 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:32:18.461042 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-18 12:32:18.461032842 +0000 UTC m=+11.452602331 E0618 12:32:18.462436 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:32:18.462834 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:32:18.462917 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:32:18.462956 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-18 12:32:18.462950197 +0000 UTC m=+11.454519676 E0618 12:32:18.481002 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0618 12:32:18.481185 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:32:18.481315 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:32:18.481382 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0618 12:32:18.505466 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:32:18.520621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-18 12:32:18.520606276 +0000 UTC m=+11.512175775 I0618 12:32:18.551941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-18 12:32:18.551924921 +0000 UTC m=+11.543494420 I0618 12:32:18.577581 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:32:18.577569522 +0000 UTC m=+11.569139011 I0618 12:32:18.596472 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:32:18.635180 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:32:23.481888 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:32:23.481845146 +0000 UTC m=+16.473414665 I0618 12:32:49.043985 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:32:49.044032 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-18 12:32:49.043986958 +0000 UTC m=+42.035556467 I0618 12:32:49.044063 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-18 12:32:49.044053299 +0000 UTC m=+42.035622808 I0618 12:32:49.055093 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-18 12:32:49.055082905 +0000 UTC m=+42.046652384 I0618 12:32:49.059094 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:32:49.059183 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-18 12:32:49.059174234 +0000 UTC m=+42.050743733 I0618 12:32:49.256698 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:32:49.293337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-18 12:32:49.293322676 +0000 UTC m=+42.284892185 I0618 12:32:49.319798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-18 12:32:49.319784032 +0000 UTC m=+42.311353541 I0618 12:32:49.354028 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:32:49.35401402 +0000 UTC m=+42.345583509 I0618 12:32:49.373130 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:32:49.374521 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:32:49.374508716 +0000 UTC m=+42.366078205 I0618 12:32:49.413530 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:32:49.414307 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:32:49.419350 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:37:40.497871 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-91.nip.io-tls" condition "Ready" to 2026-06-18 12:37:40.497826383 +0000 UTC m=+333.489395902 I0618 12:37:40.498061 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-91.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:37:40.498131 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-91.nip.io-tls" condition "Issuing" to 2026-06-18 12:37:40.498125829 +0000 UTC m=+333.489695318 I0618 12:37:40.655700 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:37:40.656317 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-91.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:37:40.656397 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-91.nip.io-tls" condition "Issuing" to 2026-06-18 12:37:40.656387671 +0000 UTC m=+333.647957190 I0618 12:37:41.016213 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:37:41.017271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-91.nip.io-tls-1" condition "Approved" to 2026-06-18 12:37:41.017255632 +0000 UTC m=+334.008825161 I0618 12:37:41.116137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-91.nip.io-tls-1" condition "Ready" to 2026-06-18 12:37:41.116127173 +0000 UTC m=+334.107696662 I0618 12:37:41.345017 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-91.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:37:41.345000531 +0000 UTC m=+334.336570050 I0618 12:37:41.470599 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:37:41.472064 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-91.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:37:41.472057053 +0000 UTC m=+334.463626532 I0618 12:37:41.476120 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:37:41.641703 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:38:45.952228 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:38:45.952282 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-18 12:38:45.952277767 +0000 UTC m=+398.943847256 I0618 12:38:45.952276 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-18 12:38:45.952251607 +0000 UTC m=+398.943821096 I0618 12:38:45.965724 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:38:45.965768 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:38:45.965784 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-18 12:38:45.965778597 +0000 UTC m=+398.957348076 E0618 12:38:45.970612 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:38:45.970918 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-18 12:38:45.970857317 +0000 UTC m=+398.962426876 E0618 12:38:45.970967 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:38:45.980570 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0618 12:38:45.980775 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:38:45.980872 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:38:45.980926 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0618 12:38:46.002371 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:38:46.010136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-18 12:38:46.010126384 +0000 UTC m=+399.001695873 I0618 12:38:46.024445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-18 12:38:46.024434988 +0000 UTC m=+399.016004477 I0618 12:38:46.044390 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:38:46.044373002 +0000 UTC m=+399.035942511 I0618 12:38:46.057187 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:38:46.057744 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:38:46.057735769 +0000 UTC m=+399.049305248 I0618 12:38:46.071019 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:38:50.981094 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:38:50.981056532 +0000 UTC m=+403.972626021 I0618 12:39:49.155040 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-18 12:39:49.155006997 +0000 UTC m=+462.146576486 I0618 12:39:49.155226 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:39:49.155276 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-18 12:39:49.155270561 +0000 UTC m=+462.146840040 I0618 12:39:49.163102 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:39:49.163133 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-18 12:39:49.163129546 +0000 UTC m=+462.154699035 I0618 12:39:49.162913 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-18 12:39:49.162897902 +0000 UTC m=+462.154467391 I0618 12:39:49.168479 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-18 12:39:49.168471647 +0000 UTC m=+462.160041136 I0618 12:39:49.168533 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:39:49.168561 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-18 12:39:49.168554809 +0000 UTC m=+462.160124288 I0618 12:39:49.179946 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:49.180352 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-18 12:39:49.180342661 +0000 UTC m=+462.171912160 I0618 12:39:49.184322 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:49.184368 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-18 12:39:49.184364029 +0000 UTC m=+462.175933508 I0618 12:39:49.188043 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:49.188169 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:39:49.188225 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-18 12:39:49.188218595 +0000 UTC m=+462.179788074 I0618 12:39:49.379334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-18 12:39:49.379324347 +0000 UTC m=+462.370893826 I0618 12:39:49.395431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-18 12:39:49.395423293 +0000 UTC m=+462.386992772 I0618 12:39:49.407952 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:49.414196 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:49.418777 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:39:49.418763872 +0000 UTC m=+462.410333351 I0618 12:39:49.439844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:49.440796 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:39:49.440786039 +0000 UTC m=+462.432355528 I0618 12:39:49.446100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-18 12:39:49.44608606 +0000 UTC m=+462.437655579 I0618 12:39:49.450423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-18 12:39:49.450412254 +0000 UTC m=+462.441981733 I0618 12:39:49.460838 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:49.462631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-18 12:39:49.462620883 +0000 UTC m=+462.454190392 I0618 12:39:49.592597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-18 12:39:49.592587118 +0000 UTC m=+462.584156587 I0618 12:39:49.613518 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:50.199471 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:39:50.199452666 +0000 UTC m=+463.191022155 I0618 12:39:50.310962 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:39:50.310943194 +0000 UTC m=+463.302512703 I0618 12:39:50.395186 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:50.542054 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:51.094675 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:59.038639 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bqvms-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:39:59.038688 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bqvms-tls" condition "Issuing" to 2026-06-18 12:39:59.038676837 +0000 UTC m=+472.030246356 I0618 12:39:59.038664 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bqvms-tls" condition "Ready" to 2026-06-18 12:39:59.038636256 +0000 UTC m=+472.030205765 I0618 12:39:59.049397 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bqvms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bqvms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:59.049468 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bqvms-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:39:59.049491 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bqvms-tls" condition "Issuing" to 2026-06-18 12:39:59.049484221 +0000 UTC m=+472.041053710 I0618 12:39:59.155795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bqvms-tls-1" condition "Approved" to 2026-06-18 12:39:59.155777133 +0000 UTC m=+472.147346642 I0618 12:39:59.177299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bqvms-tls-1" condition "Ready" to 2026-06-18 12:39:59.177290269 +0000 UTC m=+472.168859748 I0618 12:39:59.203385 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bqvms-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:39:59.203367674 +0000 UTC m=+472.194937193 I0618 12:39:59.224068 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bqvms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bqvms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:39:59.275048 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bqvms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bqvms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:18.938704 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-18 12:40:18.938650813 +0000 UTC m=+491.930220312 I0618 12:40:18.938848 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:40:18.938892 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-18 12:40:18.938884037 +0000 UTC m=+491.930453526 I0618 12:40:19.005793 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:19.005935 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:40:19.005972 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-18 12:40:19.005962812 +0000 UTC m=+491.997532351 I0618 12:40:19.193412 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:19.194618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-18 12:40:19.194603253 +0000 UTC m=+492.186172752 I0618 12:40:19.239266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-18 12:40:19.239254918 +0000 UTC m=+492.230824407 I0618 12:40:19.421080 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:40:19.421061033 +0000 UTC m=+492.412630552 I0618 12:40:19.512585 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:19.513349 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:40:19.513337813 +0000 UTC m=+492.504907322 I0618 12:40:19.558134 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:43.037909 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-18 12:43:43.037895059 +0000 UTC m=+696.029464538 I0618 12:43:43.038018 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:43:43.038065 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-18 12:43:43.038054974 +0000 UTC m=+696.029624463 I0618 12:43:43.051590 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:43.051881 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:43:43.052009 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-18 12:43:43.051910892 +0000 UTC m=+696.043480411 I0618 12:43:43.621679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-18 12:43:43.621665665 +0000 UTC m=+696.613235154 I0618 12:43:43.637563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-18 12:43:43.637552998 +0000 UTC m=+696.629122487 I0618 12:43:43.662946 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:43:43.662933141 +0000 UTC m=+696.654502610 I0618 12:43:43.680949 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:43:43.681403 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:43:43.681397126 +0000 UTC m=+696.672966605 I0618 12:43:43.692687 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:44:31.415442 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-18 12:44:31.41540085 +0000 UTC m=+744.406970339 I0618 12:44:31.415875 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:44:31.415913 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-18 12:44:31.415908975 +0000 UTC m=+744.407478464 I0618 12:44:31.430230 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:44:31.430540 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-18 12:44:31.430477342 +0000 UTC m=+744.422046941 I0618 12:44:31.830655 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:44:31.862970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-18 12:44:31.862956742 +0000 UTC m=+744.854526241 I0618 12:44:31.877961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-18 12:44:31.877949042 +0000 UTC m=+744.869518531 I0618 12:44:31.900458 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:44:31.900448112 +0000 UTC m=+744.892017591 I0618 12:44:31.916627 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:44:31.982161 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"