I0623 18:40:49.973244 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0623 18:40:49.973613 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0623 18:40:49.973952 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0623 18:40:49.978678 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0623 18:40:49.979069 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0623 18:40:49.979119 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0623 18:40:49.979161 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0623 18:40:49.981617 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0623 18:40:49.997216 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0623 18:40:50.001152 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0623 18:40:50.005328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0623 18:40:50.008207 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0623 18:40:50.008545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0623 18:40:50.011412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0623 18:40:50.013273 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0623 18:40:50.015098 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0623 18:40:50.016847 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0623 18:40:50.018508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0623 18:40:50.020301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0623 18:40:50.023662 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0623 18:40:50.023692 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0623 18:40:50.024025 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0623 18:40:50.030742 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0623 18:40:50.034174 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0623 18:40:50.034266 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0623 18:40:50.037415 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0623 18:40:50.039697 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0623 18:40:50.041714 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0623 18:40:50.041791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0623 18:40:50.045114 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0623 18:40:50.045250 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0623 18:40:50.047684 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0623 18:40:50.050493 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0623 18:40:50.052202 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 18:40:50.053212 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 18:40:50.053859 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 18:40:50.054015 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 18:40:50.070548 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 18:40:50.087685 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 18:40:50.107041 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 18:40:50.122553 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 18:40:50.139711 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 18:40:50.150308 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0623 18:41:03.773468 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-23 18:41:03.773447599 +0000 UTC m=+13.833897989 I0623 18:41:04.543956 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:41:04.543988 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-23 18:41:04.543971777 +0000 UTC m=+14.604422147 I0623 18:41:04.544004 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-23 18:41:04.543992137 +0000 UTC m=+14.604442537 E0623 18:41:04.561493 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0623 18:41:04.561584 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-23 18:41:04.561575979 +0000 UTC m=+14.622026349 E0623 18:41:04.561609 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0623 18:41:04.566606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:41:04.566678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:41:04.566714 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-23 18:41:04.566702686 +0000 UTC m=+14.627153076 E0623 18:41:04.580533 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0623 18:41:04.581482 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 18:41:04.581621 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 18:41:04.582508 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0623 18:41:04.617090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dv2sq" condition "Approved" to 2026-06-23 18:41:04.617076687 +0000 UTC m=+14.677527057 I0623 18:41:04.632191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dv2sq" condition "Ready" to 2026-06-23 18:41:04.632183942 +0000 UTC m=+14.692634312 I0623 18:41:04.654959 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:41:04.654951612 +0000 UTC m=+14.715401972 I0623 18:41:04.687298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:41:04.736758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:41:09.581818 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:41:09.581787863 +0000 UTC m=+19.642238253 I0623 18:41:33.789791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:41:33.789901 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-23 18:41:33.789879606 +0000 UTC m=+43.850330006 I0623 18:41:33.789898 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-23 18:41:33.789886087 +0000 UTC m=+43.850336477 I0623 18:41:33.838593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:41:33.838764 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-23 18:41:33.838738273 +0000 UTC m=+43.899188643 I0623 18:41:33.839542 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-23 18:41:33.839524067 +0000 UTC m=+43.899974437 I0623 18:41:34.517080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:41:34.602444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-64zmg" condition "Approved" to 2026-06-23 18:41:34.602428741 +0000 UTC m=+44.662879111 I0623 18:41:34.652361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-64zmg" condition "Ready" to 2026-06-23 18:41:34.652343962 +0000 UTC m=+44.712794342 I0623 18:41:34.743229 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:41:34.743193304 +0000 UTC m=+44.803643684 I0623 18:41:34.846971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:41:34.847278 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:41:34.847272367 +0000 UTC m=+44.907722717 I0623 18:41:35.018033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:46:28.808883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:46:28.809025 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-116.nip.io-tls" condition "Issuing" to 2026-06-23 18:46:28.809016119 +0000 UTC m=+338.869466489 I0623 18:46:28.808863 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-116.nip.io-tls" condition "Ready" to 2026-06-23 18:46:28.808799834 +0000 UTC m=+338.869250224 I0623 18:46:28.831260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:46:28.831391 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-116.nip.io-tls" condition "Ready" to 2026-06-23 18:46:28.831377111 +0000 UTC m=+338.891827501 I0623 18:46:28.897563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:46:28.934685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-116.nip.io-tls-wzvmn" condition "Approved" to 2026-06-23 18:46:28.934666141 +0000 UTC m=+338.995116511 I0623 18:46:28.989479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-116.nip.io-tls-wzvmn" condition "Ready" to 2026-06-23 18:46:28.989454118 +0000 UTC m=+339.049904518 I0623 18:46:29.045949 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:46:29.045928608 +0000 UTC m=+339.106379008 I0623 18:46:29.070216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:46:29.070738 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:46:29.07072543 +0000 UTC m=+339.131175830 I0623 18:46:29.086261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:46:29.086634 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:46:29.086624215 +0000 UTC m=+339.147074585 I0623 18:47:34.687173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:47:34.687335 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-23 18:47:34.687323029 +0000 UTC m=+404.747773429 I0623 18:47:34.687304 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-23 18:47:34.687283899 +0000 UTC m=+404.747734299 I0623 18:47:34.702359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:47:34.702457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:47:34.702513 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-23 18:47:34.702507514 +0000 UTC m=+404.762957864 E0623 18:47:34.704625 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0623 18:47:34.704678 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-23 18:47:34.704666975 +0000 UTC m=+404.765117335 E0623 18:47:34.704762 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 18:47:34.721824 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0623 18:47:34.722858 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 18:47:34.722952 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0623 18:47:34.722997 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0623 18:47:34.751134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fjqvp" condition "Approved" to 2026-06-23 18:47:34.751114447 +0000 UTC m=+404.811564847 I0623 18:47:34.761630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fjqvp" condition "Ready" to 2026-06-23 18:47:34.761619714 +0000 UTC m=+404.822070084 I0623 18:47:34.780752 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:47:34.780738463 +0000 UTC m=+404.841188833 I0623 18:47:34.797818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:47:34.798444 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:47:34.798435645 +0000 UTC m=+404.858886015 I0623 18:47:34.803505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:47:34.817485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:47:39.723592 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:47:39.723574297 +0000 UTC m=+409.784024697 I0623 18:48:24.001946 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:48:24.001982 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-23 18:48:24.001968219 +0000 UTC m=+454.062418579 I0623 18:48:24.002026 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-23 18:48:24.002018169 +0000 UTC m=+454.062468529 I0623 18:48:24.014134 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-23 18:48:24.014119013 +0000 UTC m=+454.074569373 I0623 18:48:24.014174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:48:24.021625 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-23 18:48:24.021611756 +0000 UTC m=+454.082062146 I0623 18:48:24.014629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:48:24.022124 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-23 18:48:24.022119715 +0000 UTC m=+454.082570085 I0623 18:48:24.014798 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-23 18:48:24.014788515 +0000 UTC m=+454.075238875 I0623 18:48:24.122090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:24.122676 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-23 18:48:24.122473016 +0000 UTC m=+454.182923396 I0623 18:48:24.143846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:24.144183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:48:24.144239 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-23 18:48:24.14423099 +0000 UTC m=+454.204681350 I0623 18:48:24.146893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:24.147156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:48:24.147194 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-23 18:48:24.147186743 +0000 UTC m=+454.207637103 I0623 18:48:24.536207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:24.569474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-stqvq" condition "Approved" to 2026-06-23 18:48:24.569459867 +0000 UTC m=+454.629910237 I0623 18:48:24.605835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p4j6l" condition "Approved" to 2026-06-23 18:48:24.605824919 +0000 UTC m=+454.666275279 I0623 18:48:24.606900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-stqvq" condition "Ready" to 2026-06-23 18:48:24.606885978 +0000 UTC m=+454.667336328 I0623 18:48:24.640269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p4j6l" condition "Ready" to 2026-06-23 18:48:24.640256836 +0000 UTC m=+454.700707196 I0623 18:48:24.662154 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:48:24.662138773 +0000 UTC m=+454.722589143 I0623 18:48:24.686508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:24.695723 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:48:24.695711276 +0000 UTC m=+454.756161646 I0623 18:48:24.726576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:24.726853 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:48:24.726845505 +0000 UTC m=+454.787295865 I0623 18:48:24.760119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:24.882468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-b7h28" condition "Approved" to 2026-06-23 18:48:24.882448102 +0000 UTC m=+454.942898472 I0623 18:48:25.130760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-b7h28" condition "Ready" to 2026-06-23 18:48:25.130747382 +0000 UTC m=+455.191197762 I0623 18:48:25.359723 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:48:25.35970921 +0000 UTC m=+455.420159580 I0623 18:48:25.515126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:25.515775 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:48:25.515755452 +0000 UTC m=+455.576205822 I0623 18:48:25.720986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:34.349114 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" condition "Ready" to 2026-06-23 18:48:34.349077382 +0000 UTC m=+464.409527772 I0623 18:48:34.349703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:48:34.349736 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" condition "Issuing" to 2026-06-23 18:48:34.349729003 +0000 UTC m=+464.410179393 I0623 18:48:34.369229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:34.369308 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" condition "Ready" to 2026-06-23 18:48:34.369299785 +0000 UTC m=+464.429750155 I0623 18:48:34.711384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:34.756331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fzbvp-7rsp7" condition "Approved" to 2026-06-23 18:48:34.756294148 +0000 UTC m=+464.816744528 I0623 18:48:34.820441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fzbvp-7rsp7" condition "Ready" to 2026-06-23 18:48:34.820426349 +0000 UTC m=+464.880876719 I0623 18:48:36.335976 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:48:36.335960718 +0000 UTC m=+466.396411078 I0623 18:48:36.478531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:36.479131 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:48:36.479121006 +0000 UTC m=+466.539571376 I0623 18:48:36.535507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:36.536333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzbvp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:50.067254 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-23 18:48:50.067234749 +0000 UTC m=+480.127685099 I0623 18:48:50.067265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:48:50.067483 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-23 18:48:50.067468453 +0000 UTC m=+480.127918823 I0623 18:48:50.086907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:50.087506 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-23 18:48:50.087497598 +0000 UTC m=+480.147947958 I0623 18:48:50.426446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:50.464902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gb6gw" condition "Approved" to 2026-06-23 18:48:50.464884568 +0000 UTC m=+480.525334948 I0623 18:48:50.486222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gb6gw" condition "Ready" to 2026-06-23 18:48:50.486208915 +0000 UTC m=+480.546659275 I0623 18:48:50.527500 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:48:50.527481636 +0000 UTC m=+480.587932006 I0623 18:48:50.560927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:50.561392 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:48:50.5613824 +0000 UTC m=+480.621832780 I0623 18:48:50.576154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:48:50.576540 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:48:50.576531651 +0000 UTC m=+480.636982011 I0623 18:52:14.976914 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-23 18:52:14.976893356 +0000 UTC m=+685.037343726 I0623 18:52:14.977027 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:52:14.977216 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-23 18:52:14.977208451 +0000 UTC m=+685.037658831 I0623 18:52:14.993954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:52:14.994148 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:52:14.994173 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-23 18:52:14.994163947 +0000 UTC m=+685.054614317 I0623 18:52:15.133584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:52:15.139357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pkn4b" condition "Approved" to 2026-06-23 18:52:15.139340167 +0000 UTC m=+685.199790547 I0623 18:52:15.157026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pkn4b" condition "Ready" to 2026-06-23 18:52:15.157005725 +0000 UTC m=+685.217456085 I0623 18:52:15.191248 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:52:15.191226772 +0000 UTC m=+685.251677142 I0623 18:52:15.217575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:52:58.346789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:52:58.346934 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-23 18:52:58.3468817 +0000 UTC m=+728.407332120 I0623 18:52:58.347049 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-23 18:52:58.347031186 +0000 UTC m=+728.407481556 I0623 18:52:58.365335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:52:58.365458 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0623 18:52:58.365588 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-23 18:52:58.365500026 +0000 UTC m=+728.425950426 I0623 18:52:58.543196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:52:58.557342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rhq7m" condition "Approved" to 2026-06-23 18:52:58.557327263 +0000 UTC m=+728.617777643 I0623 18:52:58.583979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rhq7m" condition "Ready" to 2026-06-23 18:52:58.583961301 +0000 UTC m=+728.644411671 I0623 18:52:58.615131 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:52:58.615113895 +0000 UTC m=+728.675564265 I0623 18:52:58.641864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0623 18:52:58.642198 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-23 18:52:58.64219034 +0000 UTC m=+728.702640700 I0623 18:52:58.663065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"