I0630 22:17:34.831232 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0630 22:17:34.831365 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0630 22:17:34.831439 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0630 22:17:34.836416 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0630 22:17:34.837983 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0630 22:17:34.841070 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0630 22:17:34.841283 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0630 22:17:34.841307 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0630 22:17:34.854066 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0630 22:17:34.854207 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0630 22:17:34.856590 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0630 22:17:34.861652 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0630 22:17:34.862145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0630 22:17:34.863477 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0630 22:17:34.865402 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0630 22:17:34.867117 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0630 22:17:34.868722 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0630 22:17:34.870596 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0630 22:17:34.874680 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0630 22:17:34.878451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0630 22:17:34.880814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0630 22:17:34.883247 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0630 22:17:34.885666 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0630 22:17:34.887727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0630 22:17:34.889279 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0630 22:17:34.889302 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0630 22:17:34.889314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0630 22:17:34.891124 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0630 22:17:34.894995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0630 22:17:34.896862 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0630 22:17:34.898509 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0630 22:17:34.898532 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0630 22:17:34.898910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0630 22:17:34.900115 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 22:17:34.901409 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 22:17:34.901914 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 22:17:34.919540 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 22:17:34.936977 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 22:17:34.951606 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 22:17:34.963264 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 22:17:34.979355 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 22:17:34.988732 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 22:17:34.994361 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 22:17:47.849590 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-30 22:17:47.849560409 +0000 UTC m=+13.052046672 I0630 22:17:48.506488 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 22:17:48.506469918 +0000 UTC m=+13.708956151 I0630 22:17:48.506760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:17:48.506809 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-30 22:17:48.506800435 +0000 UTC m=+13.709286658 E0630 22:17:48.524973 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 22:17:48.525100 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-30 22:17:48.525087219 +0000 UTC m=+13.727573472 E0630 22:17:48.525133 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 22:17:48.528407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:17:48.528521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:17:48.528562 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-30 22:17:48.528553504 +0000 UTC m=+13.731039737 E0630 22:17:48.538122 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0630 22:17:48.538212 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 22:17:48.538260 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 22:17:48.538298 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0630 22:17:48.572760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2tpms" condition "Approved" to 2026-06-30 22:17:48.572743066 +0000 UTC m=+13.775229319 I0630 22:17:48.589128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2tpms" condition "Ready" to 2026-06-30 22:17:48.589114008 +0000 UTC m=+13.791600271 I0630 22:17:48.612281 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:17:48.612264757 +0000 UTC m=+13.814751010 I0630 22:17:48.631920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:17:53.538548 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:17:53.538535078 +0000 UTC m=+18.741021311 I0630 22:18:16.054229 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-30 22:18:16.05419789 +0000 UTC m=+41.256684133 I0630 22:18:16.054613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:18:16.054625 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-30 22:18:16.054622067 +0000 UTC m=+41.257108290 I0630 22:18:16.084007 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-30 22:18:16.083995699 +0000 UTC m=+41.286481932 I0630 22:18:16.089877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:18:16.089978 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-30 22:18:16.089968521 +0000 UTC m=+41.292454774 I0630 22:18:16.181555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:18:16.210541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-l9vqf" condition "Approved" to 2026-06-30 22:18:16.210524781 +0000 UTC m=+41.413011034 I0630 22:18:16.241461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-l9vqf" condition "Ready" to 2026-06-30 22:18:16.241449299 +0000 UTC m=+41.443935532 I0630 22:18:16.279460 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:18:16.279449308 +0000 UTC m=+41.481935581 I0630 22:18:16.303561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:18:16.303783 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:18:16.303778634 +0000 UTC m=+41.506264857 I0630 22:18:16.309304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:18:16.322738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:22:26.383113 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-06-30 22:22:26.382890962 +0000 UTC m=+291.585377195 I0630 22:22:26.383579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:22:26.383625 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Issuing" to 2026-06-30 22:22:26.383616803 +0000 UTC m=+291.586103026 I0630 22:22:26.400167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:22:26.400303 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:22:26.400397 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Issuing" to 2026-06-30 22:22:26.400388257 +0000 UTC m=+291.602874490 I0630 22:22:26.553083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:22:26.561367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-m6crh" condition "Approved" to 2026-06-30 22:22:26.561347777 +0000 UTC m=+291.763834030 I0630 22:22:26.588060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-m6crh" condition "Ready" to 2026-06-30 22:22:26.588049929 +0000 UTC m=+291.790536182 I0630 22:22:26.617552 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:22:26.61753071 +0000 UTC m=+291.820016943 I0630 22:22:26.638616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:22:26.639510 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:22:26.639488434 +0000 UTC m=+291.841974687 I0630 22:22:26.659300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:22:26.661763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:23:31.002909 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-30 22:23:31.00284597 +0000 UTC m=+356.205332253 I0630 22:23:31.003426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:23:31.003495 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-30 22:23:31.003486894 +0000 UTC m=+356.205973137 E0630 22:23:31.017201 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 22:23:31.017781 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-30 22:23:31.017773896 +0000 UTC m=+356.220260119 E0630 22:23:31.017822 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 22:23:31.020155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:23:31.020205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:23:31.020221 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-30 22:23:31.02021535 +0000 UTC m=+356.222701573 E0630 22:23:31.029907 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0630 22:23:31.030027 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 22:23:31.030084 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 22:23:31.030128 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0630 22:23:31.056945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vfn2m" condition "Approved" to 2026-06-30 22:23:31.056935585 +0000 UTC m=+356.259421818 I0630 22:23:31.067517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vfn2m" condition "Ready" to 2026-06-30 22:23:31.067504752 +0000 UTC m=+356.269990985 I0630 22:23:31.089852 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:23:31.089838433 +0000 UTC m=+356.292324696 I0630 22:23:31.112584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:23:31.114460 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:23:31.114449386 +0000 UTC m=+356.316935619 I0630 22:23:31.136239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:23:31.138265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:23:36.030489 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:23:36.030475048 +0000 UTC m=+361.232961301 I0630 22:24:19.788701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:24:19.788769 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-30 22:24:19.78876135 +0000 UTC m=+404.991247583 I0630 22:24:19.789135 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-30 22:24:19.789130547 +0000 UTC m=+404.991616780 I0630 22:24:19.808562 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-30 22:24:19.808542854 +0000 UTC m=+405.011029077 I0630 22:24:19.812272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:24:19.812313 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-30 22:24:19.812305957 +0000 UTC m=+405.014792180 I0630 22:24:19.812556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:24:19.812573 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-30 22:24:19.812570772 +0000 UTC m=+405.015056995 I0630 22:24:19.812631 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-30 22:24:19.812625473 +0000 UTC m=+405.015111696 I0630 22:24:19.870840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:19.870929 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-30 22:24:19.870918084 +0000 UTC m=+405.073404307 I0630 22:24:19.879709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:19.879832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:24:19.879911 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-30 22:24:19.879903658 +0000 UTC m=+405.082389871 I0630 22:24:19.886989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:19.889091 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-30 22:24:19.889081486 +0000 UTC m=+405.091567729 I0630 22:24:20.068851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:20.082967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p4j6t" condition "Approved" to 2026-06-30 22:24:20.082955646 +0000 UTC m=+405.285441859 I0630 22:24:20.114051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p4j6t" condition "Ready" to 2026-06-30 22:24:20.114035658 +0000 UTC m=+405.316521891 I0630 22:24:20.140260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:20.167400 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:24:20.16738562 +0000 UTC m=+405.369871843 I0630 22:24:20.173914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:20.187669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v6s8p" condition "Approved" to 2026-06-30 22:24:20.187654603 +0000 UTC m=+405.390140836 I0630 22:24:20.193575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:20.208718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v6s8p" condition "Ready" to 2026-06-30 22:24:20.20870754 +0000 UTC m=+405.411193773 I0630 22:24:20.218128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gflb2" condition "Approved" to 2026-06-30 22:24:20.218112702 +0000 UTC m=+405.420598925 I0630 22:24:20.297759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gflb2" condition "Ready" to 2026-06-30 22:24:20.297743804 +0000 UTC m=+405.500230067 I0630 22:24:20.673180 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:24:20.673163022 +0000 UTC m=+405.875649255 I0630 22:24:20.971490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:20.971855 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:24:20.971848345 +0000 UTC m=+406.174334568 I0630 22:24:21.027152 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:24:21.027138024 +0000 UTC m=+406.229624247 I0630 22:24:21.075075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:21.321438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:21.321858 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:24:21.321849634 +0000 UTC m=+406.524335867 I0630 22:24:21.375741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:21.624772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:28.650157 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" condition "Ready" to 2026-06-30 22:24:28.650111615 +0000 UTC m=+413.852597848 I0630 22:24:28.653929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:24:28.654004 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" condition "Issuing" to 2026-06-30 22:24:28.653990138 +0000 UTC m=+413.856476391 I0630 22:24:28.665031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:28.665088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:24:28.665112 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" condition "Issuing" to 2026-06-30 22:24:28.665108819 +0000 UTC m=+413.867595032 I0630 22:24:29.020972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7vb2q-5klfs" condition "Approved" to 2026-06-30 22:24:29.020950654 +0000 UTC m=+414.223436907 I0630 22:24:29.049467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7vb2q-5klfs" condition "Ready" to 2026-06-30 22:24:29.049453793 +0000 UTC m=+414.251940026 I0630 22:24:29.095008 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:24:29.094992764 +0000 UTC m=+414.297478987 I0630 22:24:29.123906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:29.124363 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:24:29.124332309 +0000 UTC m=+414.326818532 I0630 22:24:29.171091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:29.177795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:29.178361 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7vb2q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:24:29.1783466 +0000 UTC m=+414.380832853 I0630 22:24:45.945651 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:24:45.945711 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-30 22:24:45.945701107 +0000 UTC m=+431.148187330 I0630 22:24:45.946080 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-30 22:24:45.946075514 +0000 UTC m=+431.148561737 I0630 22:24:45.981346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:45.981602 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-30 22:24:45.98158797 +0000 UTC m=+431.184074223 I0630 22:24:46.343853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:46.427175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-k6ghg" condition "Approved" to 2026-06-30 22:24:46.427155295 +0000 UTC m=+431.629641528 I0630 22:24:46.487788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-k6ghg" condition "Ready" to 2026-06-30 22:24:46.487773075 +0000 UTC m=+431.690259338 I0630 22:24:46.794703 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:24:46.794677303 +0000 UTC m=+431.997163556 I0630 22:24:47.044485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:24:47.044908 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:24:47.044897082 +0000 UTC m=+432.247383315 I0630 22:24:47.195190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:27:55.703574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:27:55.703574 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-30 22:27:55.70353833 +0000 UTC m=+620.906024593 I0630 22:27:55.703655 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-30 22:27:55.703644981 +0000 UTC m=+620.906131224 I0630 22:27:55.724394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:27:55.724521 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-30 22:27:55.724509093 +0000 UTC m=+620.926995356 I0630 22:27:55.864918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:27:55.904477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7rbb9" condition "Approved" to 2026-06-30 22:27:55.90446377 +0000 UTC m=+621.106949983 I0630 22:27:55.930768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7rbb9" condition "Ready" to 2026-06-30 22:27:55.930750738 +0000 UTC m=+621.133236961 I0630 22:27:55.968756 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:27:55.968745889 +0000 UTC m=+621.171232112 I0630 22:27:55.993194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:28:36.930629 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-30 22:28:36.930613986 +0000 UTC m=+662.133100229 I0630 22:28:36.930815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:28:36.930866 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-30 22:28:36.93085539 +0000 UTC m=+662.133341643 I0630 22:28:36.948236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:28:36.948277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 22:28:36.948289 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-30 22:28:36.948284468 +0000 UTC m=+662.150770701 I0630 22:28:37.314573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 22:28:37.319865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vz2sm" condition "Approved" to 2026-06-30 22:28:37.319858798 +0000 UTC m=+662.522345021 I0630 22:28:37.342731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vz2sm" condition "Ready" to 2026-06-30 22:28:37.34272211 +0000 UTC m=+662.545208343 I0630 22:28:37.366344 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 22:28:37.366335063 +0000 UTC m=+662.568821286 I0630 22:28:37.382454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"