I0624 10:59:50.644175 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0624 10:59:50.644299 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0624 10:59:50.644439 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0624 10:59:50.649173 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0624 10:59:50.649644 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0624 10:59:50.649653 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0624 10:59:50.649665 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0624 10:59:50.651886 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0624 10:59:50.670320 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0624 10:59:50.670565 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0624 10:59:50.676889 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0624 10:59:50.680545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0624 10:59:50.682557 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0624 10:59:50.684527 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0624 10:59:50.686158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0624 10:59:50.687858 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0624 10:59:50.688014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0624 10:59:50.689596 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0624 10:59:50.689740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0624 10:59:50.693125 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0624 10:59:50.694786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0624 10:59:50.696467 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0624 10:59:50.698003 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0624 10:59:50.698020 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0624 10:59:50.698163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0624 10:59:50.699980 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0624 10:59:50.702148 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0624 10:59:50.705737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0624 10:59:50.708838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0624 10:59:50.715540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0624 10:59:50.718170 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0624 10:59:50.718307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0624 10:59:50.721181 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0624 10:59:50.722957 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 10:59:50.723651 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 10:59:50.724591 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 10:59:50.726357 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 10:59:50.738884 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 10:59:50.756931 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 10:59:50.777811 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 10:59:50.788897 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 10:59:50.814493 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 10:59:50.825176 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 11:00:01.819815 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-24 11:00:01.819798533 +0000 UTC m=+11.208379135 I0624 11:00:02.622952 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-24 11:00:02.622935747 +0000 UTC m=+12.011516369 I0624 11:00:02.623035 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:00:02.623113 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 11:00:02.623102742 +0000 UTC m=+12.011683364 E0624 11:00:02.635189 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 11:00:02.635253 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-24 11:00:02.635245926 +0000 UTC m=+12.023826528 E0624 11:00:02.635277 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 11:00:02.641673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:00:02.641762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:00:02.641791 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 11:00:02.641783942 +0000 UTC m=+12.030364544 E0624 11:00:02.643876 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0624 11:00:02.644022 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 11:00:02.644081 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 11:00:02.644161 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0624 11:00:02.684503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:00:02.690058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rmg4n" condition "Approved" to 2026-06-24 11:00:02.690046891 +0000 UTC m=+12.078627493 I0624 11:00:02.704357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rmg4n" condition "Ready" to 2026-06-24 11:00:02.704343139 +0000 UTC m=+12.092923741 I0624 11:00:02.730165 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:00:02.730139003 +0000 UTC m=+12.118719605 I0624 11:00:02.748962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:00:02.797895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:00:07.644367 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:00:07.644351859 +0000 UTC m=+17.032932451 I0624 11:00:28.942504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:00:28.942551 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 11:00:28.942537336 +0000 UTC m=+38.331117938 I0624 11:00:28.950718 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 11:00:28.942429472 +0000 UTC m=+38.331010074 I0624 11:00:28.965854 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-24 11:00:28.9658429 +0000 UTC m=+38.354423492 I0624 11:00:29.053072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:00:29.053145 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 11:00:29.053138528 +0000 UTC m=+38.441719120 I0624 11:00:29.297892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:00:29.335479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bl5jw" condition "Approved" to 2026-06-24 11:00:29.335466702 +0000 UTC m=+38.724047304 I0624 11:00:29.365507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bl5jw" condition "Ready" to 2026-06-24 11:00:29.365494 +0000 UTC m=+38.754074602 I0624 11:00:29.403335 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:00:29.403322655 +0000 UTC m=+38.791903257 I0624 11:00:29.428488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:00:29.487955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:05:18.020314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-191.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:05:18.020372 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-191.nip.io-tls" condition "Issuing" to 2026-06-24 11:05:18.020340537 +0000 UTC m=+327.408921139 I0624 11:05:18.021604 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-191.nip.io-tls" condition "Ready" to 2026-06-24 11:05:18.021589202 +0000 UTC m=+327.410169794 I0624 11:05:18.056114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:05:18.058334 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-191.nip.io-tls" condition "Ready" to 2026-06-24 11:05:18.058318704 +0000 UTC m=+327.446899346 I0624 11:05:18.206020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:05:18.239133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-191.nip.io-tls-tj7hd" condition "Approved" to 2026-06-24 11:05:18.239120449 +0000 UTC m=+327.627701051 I0624 11:05:18.266688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-191.nip.io-tls-tj7hd" condition "Ready" to 2026-06-24 11:05:18.266674816 +0000 UTC m=+327.655255398 I0624 11:05:18.293694 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-191.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:05:18.293675752 +0000 UTC m=+327.682256384 I0624 11:05:18.313895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:05:18.455848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:06:21.116223 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-24 11:06:21.116183381 +0000 UTC m=+390.504763983 I0624 11:06:21.116542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:06:21.116751 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 11:06:21.116737845 +0000 UTC m=+390.505318447 E0624 11:06:21.129927 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 11:06:21.129972 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-24 11:06:21.129964247 +0000 UTC m=+390.518544839 E0624 11:06:21.130125 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 11:06:21.137617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:06:21.137915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:06:21.138203 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 11:06:21.138188274 +0000 UTC m=+390.526768906 E0624 11:06:21.143436 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0624 11:06:21.143588 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 11:06:21.143728 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 11:06:21.143838 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0624 11:06:21.175254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:06:21.178103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hcnlp" condition "Approved" to 2026-06-24 11:06:21.178087745 +0000 UTC m=+390.566668377 I0624 11:06:21.193660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hcnlp" condition "Ready" to 2026-06-24 11:06:21.193648237 +0000 UTC m=+390.582228839 I0624 11:06:21.215660 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:06:21.215642899 +0000 UTC m=+390.604223501 I0624 11:06:21.233308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:06:21.283835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:06:26.145165 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:06:26.145135612 +0000 UTC m=+395.533716234 I0624 11:07:11.133490 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 11:07:11.133472578 +0000 UTC m=+440.522053160 I0624 11:07:11.133719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:07:11.139793 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 11:07:11.139770251 +0000 UTC m=+440.528350893 I0624 11:07:11.154108 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 11:07:11.154096757 +0000 UTC m=+440.542677359 I0624 11:07:11.154339 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:07:11.154360 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 11:07:11.154355654 +0000 UTC m=+440.542936256 I0624 11:07:11.154723 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 11:07:11.154718684 +0000 UTC m=+440.543299286 I0624 11:07:11.155005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:07:11.155027 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 11:07:11.155021712 +0000 UTC m=+440.543602314 I0624 11:07:11.201930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:11.201983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:07:11.202126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:11.202275 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 11:07:11.202265866 +0000 UTC m=+440.590846468 I0624 11:07:11.210767 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 11:07:11.21073642 +0000 UTC m=+440.599317052 I0624 11:07:11.218660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:11.218775 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 11:07:11.21871031 +0000 UTC m=+440.607290892 I0624 11:07:11.540198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:11.757309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:11.775305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ljdr9" condition "Approved" to 2026-06-24 11:07:11.775290781 +0000 UTC m=+441.163871413 I0624 11:07:11.775442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lrffj" condition "Approved" to 2026-06-24 11:07:11.775424794 +0000 UTC m=+441.164005396 I0624 11:07:11.891879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ljdr9" condition "Ready" to 2026-06-24 11:07:11.891867317 +0000 UTC m=+441.280447909 I0624 11:07:11.892449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lrffj" condition "Ready" to 2026-06-24 11:07:11.892435714 +0000 UTC m=+441.281016316 I0624 11:07:11.946957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:12.049930 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:12.049909791 +0000 UTC m=+441.438490433 I0624 11:07:12.051600 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:12.051593337 +0000 UTC m=+441.440173929 I0624 11:07:12.064333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k4xt7" condition "Approved" to 2026-06-24 11:07:12.064319649 +0000 UTC m=+441.452900231 I0624 11:07:12.088608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:12.088864 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:12.088857068 +0000 UTC m=+441.477437660 I0624 11:07:12.090455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:12.090739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k4xt7" condition "Ready" to 2026-06-24 11:07:12.090732619 +0000 UTC m=+441.479313211 I0624 11:07:12.118296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:12.118655 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:12.118645141 +0000 UTC m=+441.507225733 I0624 11:07:12.404433 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:12.404390878 +0000 UTC m=+441.792971510 I0624 11:07:12.558662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:12.856404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:20.514444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:07:20.514516 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls" condition "Issuing" to 2026-06-24 11:07:20.514498996 +0000 UTC m=+449.903079628 I0624 11:07:20.514852 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls" condition "Ready" to 2026-06-24 11:07:20.514806674 +0000 UTC m=+449.903387276 I0624 11:07:20.531875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:20.531948 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls" condition "Ready" to 2026-06-24 11:07:20.531941304 +0000 UTC m=+449.920521896 I0624 11:07:20.759060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:20.806774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hrf8f-w2frp" condition "Approved" to 2026-06-24 11:07:20.806755705 +0000 UTC m=+450.195336297 I0624 11:07:20.847043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hrf8f-w2frp" condition "Ready" to 2026-06-24 11:07:20.847032711 +0000 UTC m=+450.235613313 I0624 11:07:20.880199 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:20.880178817 +0000 UTC m=+450.268759419 I0624 11:07:20.906796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hrf8f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:35.140381 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-24 11:07:35.140327152 +0000 UTC m=+464.528907794 I0624 11:07:35.141214 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:07:35.141230 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 11:07:35.141226548 +0000 UTC m=+464.529807140 I0624 11:07:35.173055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:35.173170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:07:35.173196 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 11:07:35.173188688 +0000 UTC m=+464.561769280 I0624 11:07:35.487221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b5bw7" condition "Approved" to 2026-06-24 11:07:35.487208413 +0000 UTC m=+464.875789005 I0624 11:07:35.516664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b5bw7" condition "Ready" to 2026-06-24 11:07:35.516648773 +0000 UTC m=+464.905229355 I0624 11:07:35.644807 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:35.644791702 +0000 UTC m=+465.033372304 I0624 11:07:35.670690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:07:35.671022 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:07:35.67101369 +0000 UTC m=+465.059594292 I0624 11:07:35.711234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:10:53.177427 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 11:10:53.177400868 +0000 UTC m=+662.565981460 I0624 11:10:53.178099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:10:53.178160 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 11:10:53.178151782 +0000 UTC m=+662.566732384 I0624 11:10:53.194258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:10:53.194430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:10:53.194455 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 11:10:53.194448472 +0000 UTC m=+662.583029074 I0624 11:10:53.370228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-v4h4t" condition "Approved" to 2026-06-24 11:10:53.370207463 +0000 UTC m=+662.758788065 I0624 11:10:53.390504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-v4h4t" condition "Ready" to 2026-06-24 11:10:53.39049383 +0000 UTC m=+662.779074432 I0624 11:10:53.425354 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:10:53.42533933 +0000 UTC m=+662.813919932 I0624 11:10:53.455561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:10:53.457355 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:10:53.45734718 +0000 UTC m=+662.845927772 I0624 11:10:53.459503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:10:53.476896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:10:53.477363 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:10:53.477352488 +0000 UTC m=+662.865933090 I0624 11:11:33.358844 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:11:33.358928 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 11:11:33.358898727 +0000 UTC m=+702.747479349 I0624 11:11:33.359287 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-24 11:11:33.35925865 +0000 UTC m=+702.747839272 I0624 11:11:33.382071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 11:11:33.382358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 11:11:33.382473 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 11:11:33.382463177 +0000 UTC m=+702.771043819 I0624 11:11:33.533866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rfbxf" condition "Approved" to 2026-06-24 11:11:33.533848329 +0000 UTC m=+702.922428961 I0624 11:11:33.554473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rfbxf" condition "Ready" to 2026-06-24 11:11:33.554458816 +0000 UTC m=+702.943039408 I0624 11:11:33.596867 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 11:11:33.596849618 +0000 UTC m=+702.985430210 I0624 11:11:33.627916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"