I0630 17:55:47.785003 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0630 17:55:47.785153 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0630 17:55:47.785260 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0630 17:55:47.788977 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0630 17:55:47.789397 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0630 17:55:47.789488 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0630 17:55:47.789583 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0630 17:55:47.794971 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0630 17:55:47.816607 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0630 17:55:47.816869 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0630 17:55:47.824599 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0630 17:55:47.827534 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0630 17:55:47.829891 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0630 17:55:47.831702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0630 17:55:47.837631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0630 17:55:47.840226 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0630 17:55:47.842460 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0630 17:55:47.844563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0630 17:55:47.846386 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0630 17:55:47.846408 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0630 17:55:47.848379 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0630 17:55:47.850302 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0630 17:55:47.854651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0630 17:55:47.858403 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0630 17:55:47.861097 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0630 17:55:47.861142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0630 17:55:47.863651 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0630 17:55:47.863802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0630 17:55:47.866771 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0630 17:55:47.868833 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0630 17:55:47.868849 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0630 17:55:47.869020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0630 17:55:47.871336 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0630 17:55:47.873202 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:47.875061 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:47.875853 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:47.903077 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:47.927497 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:47.940561 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:47.956769 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:47.975138 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:47.976012 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:47.994777 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:56:03.647601 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-30 17:56:03.647568055 +0000 UTC m=+15.901807609 I0630 17:56:04.381722 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 17:56:04.381708697 +0000 UTC m=+16.635948252 I0630 17:56:04.381761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:56:04.381808 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-30 17:56:04.38180087 +0000 UTC m=+16.636040424 E0630 17:56:04.396407 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 17:56:04.397101 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-30 17:56:04.397091121 +0000 UTC m=+16.651330675 E0630 17:56:04.397572 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 17:56:04.397875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:56:04.397931 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:56:04.397951 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-30 17:56:04.397946718 +0000 UTC m=+16.652186272 E0630 17:56:04.410366 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0630 17:56:04.411796 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 17:56:04.411868 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 17:56:04.411925 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0630 17:56:04.448315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v59wx" condition "Approved" to 2026-06-30 17:56:04.448303782 +0000 UTC m=+16.702543336 I0630 17:56:04.463366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v59wx" condition "Ready" to 2026-06-30 17:56:04.463355865 +0000 UTC m=+16.717595419 I0630 17:56:04.485442 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:56:04.485431959 +0000 UTC m=+16.739671513 I0630 17:56:04.501478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:56:04.501842 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:56:04.501834425 +0000 UTC m=+16.756073979 I0630 17:56:04.516656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:56:09.412158 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:56:09.412116815 +0000 UTC m=+21.666356389 I0630 17:56:31.611187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:56:31.611300 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-30 17:56:31.611284846 +0000 UTC m=+43.865524390 I0630 17:56:31.611236 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-30 17:56:31.611220894 +0000 UTC m=+43.865460448 I0630 17:56:31.631513 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-30 17:56:31.631501004 +0000 UTC m=+43.885740548 I0630 17:56:31.651419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:56:31.651788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:56:31.651840 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-30 17:56:31.651833835 +0000 UTC m=+43.906073369 I0630 17:56:31.771676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-l7rqj" condition "Approved" to 2026-06-30 17:56:31.771665989 +0000 UTC m=+44.025905533 I0630 17:56:31.802322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-l7rqj" condition "Ready" to 2026-06-30 17:56:31.80231203 +0000 UTC m=+44.056551584 I0630 17:56:31.829840 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:56:31.8298264 +0000 UTC m=+44.084065964 I0630 17:56:31.853571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:56:31.902721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:48.656068 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready" to 2026-06-30 18:00:48.655519065 +0000 UTC m=+300.909758649 I0630 18:00:48.656829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:00:48.656861 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-06-30 18:00:48.656853708 +0000 UTC m=+300.911093292 I0630 18:00:48.690874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:48.691073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:00:48.691162 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-06-30 18:00:48.69110585 +0000 UTC m=+300.945345404 I0630 18:00:48.914249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:48.921900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-ngv8z" condition "Approved" to 2026-06-30 18:00:48.92188053 +0000 UTC m=+301.176120084 I0630 18:00:48.956011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-ngv8z" condition "Ready" to 2026-06-30 18:00:48.955963717 +0000 UTC m=+301.210203271 I0630 18:00:49.006840 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:00:49.006826946 +0000 UTC m=+301.261066500 I0630 18:00:49.027962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:49.028580 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:00:49.028569131 +0000 UTC m=+301.282808705 I0630 18:00:49.054695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:49.055435 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:00:49.055421911 +0000 UTC m=+301.309661475 I0630 18:01:55.361363 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-30 18:01:55.361337237 +0000 UTC m=+367.615576781 I0630 18:01:55.361805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:01:55.361872 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-30 18:01:55.36185944 +0000 UTC m=+367.616099014 E0630 18:01:55.375790 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 18:01:55.375837 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-30 18:01:55.375827953 +0000 UTC m=+367.630067507 E0630 18:01:55.375945 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 18:01:55.382550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:55.382627 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-30 18:01:55.38261269 +0000 UTC m=+367.636852224 E0630 18:01:55.392409 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0630 18:01:55.392502 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 18:01:55.392543 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 18:01:55.392594 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0630 18:01:55.396652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mm55b" condition "Approved" to 2026-06-30 18:01:55.396644645 +0000 UTC m=+367.650884189 I0630 18:01:55.399275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:55.399321 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-30 18:01:55.399315441 +0000 UTC m=+367.653554985 I0630 18:01:55.411142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mm55b" condition "Ready" to 2026-06-30 18:01:55.411134871 +0000 UTC m=+367.665374425 I0630 18:01:55.433230 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:55.433202194 +0000 UTC m=+367.687441768 I0630 18:01:55.454499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:55.507443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:00.393624 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:00.393607723 +0000 UTC m=+372.647847307 I0630 18:02:41.617959 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-30 18:02:41.615704743 +0000 UTC m=+413.869944297 I0630 18:02:41.618619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:41.618645 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-30 18:02:41.618640055 +0000 UTC m=+413.872879609 I0630 18:02:41.618975 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-30 18:02:41.618971153 +0000 UTC m=+413.873210697 I0630 18:02:41.619096 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-30 18:02:41.619093506 +0000 UTC m=+413.873333050 I0630 18:02:41.619220 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:41.619234 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-30 18:02:41.6192319 +0000 UTC m=+413.873471444 I0630 18:02:41.627554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:41.627618 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-30 18:02:41.627610255 +0000 UTC m=+413.881849809 I0630 18:02:41.669867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:41.669941 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:41.669957 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-30 18:02:41.669951716 +0000 UTC m=+413.924191260 I0630 18:02:41.685157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:41.685605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:41.685758 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-30 18:02:41.685752405 +0000 UTC m=+413.939991949 I0630 18:02:41.686051 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:41.686067 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-30 18:02:41.686064393 +0000 UTC m=+413.940303937 I0630 18:02:41.851149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-z225w" condition "Approved" to 2026-06-30 18:02:41.851138451 +0000 UTC m=+414.105378005 I0630 18:02:41.870289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-z225w" condition "Ready" to 2026-06-30 18:02:41.870279372 +0000 UTC m=+414.124518916 I0630 18:02:42.025339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:42.150906 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:42.15088695 +0000 UTC m=+414.405126504 I0630 18:02:42.199869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5rrmm" condition "Approved" to 2026-06-30 18:02:42.199827373 +0000 UTC m=+414.454066957 I0630 18:02:42.200297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q7fq8" condition "Approved" to 2026-06-30 18:02:42.200287355 +0000 UTC m=+414.454526939 I0630 18:02:42.203483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:42.203816 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:42.203802051 +0000 UTC m=+414.458041595 I0630 18:02:42.301419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q7fq8" condition "Ready" to 2026-06-30 18:02:42.301408491 +0000 UTC m=+414.555648045 I0630 18:02:42.301688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5rrmm" condition "Ready" to 2026-06-30 18:02:42.301675717 +0000 UTC m=+414.555915271 I0630 18:02:42.360592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:42.611060 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:42.611046033 +0000 UTC m=+414.865285587 I0630 18:02:42.674912 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:42.674901203 +0000 UTC m=+414.929140747 I0630 18:02:42.740735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:42.741176 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:42.741169302 +0000 UTC m=+414.995408856 I0630 18:02:42.849616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:42.849860 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:42.849854124 +0000 UTC m=+415.104093668 I0630 18:02:43.296337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:43.341583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:43.390582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:43.440408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:50.919322 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls" condition "Ready" to 2026-06-30 18:02:50.919291002 +0000 UTC m=+423.173530546 I0630 18:02:50.919589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:50.919610 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls" condition "Issuing" to 2026-06-30 18:02:50.91960475 +0000 UTC m=+423.173844304 I0630 18:02:50.932964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:50.933042 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls" condition "Ready" to 2026-06-30 18:02:50.93303551 +0000 UTC m=+423.187275074 I0630 18:02:51.163631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:51.188798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tnp6h-6qppf" condition "Approved" to 2026-06-30 18:02:51.188787678 +0000 UTC m=+423.443027232 I0630 18:02:51.208064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tnp6h-6qppf" condition "Ready" to 2026-06-30 18:02:51.208053842 +0000 UTC m=+423.462293396 I0630 18:02:51.240538 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:51.24052703 +0000 UTC m=+423.494766584 I0630 18:02:51.259917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:51.260259 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:51.260250685 +0000 UTC m=+423.514490239 I0630 18:02:51.278232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tnp6h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:03:05.855146 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-30 18:03:05.855132524 +0000 UTC m=+438.109372068 I0630 18:03:05.855801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:03:05.855902 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-30 18:03:05.855830741 +0000 UTC m=+438.110070295 I0630 18:03:05.872195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:03:05.872250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:03:05.872273 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-30 18:03:05.872268246 +0000 UTC m=+438.126507790 I0630 18:03:06.263391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:03:06.270192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-k8wcg" condition "Approved" to 2026-06-30 18:03:06.270178609 +0000 UTC m=+438.524418163 I0630 18:03:06.289175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-k8wcg" condition "Ready" to 2026-06-30 18:03:06.289148424 +0000 UTC m=+438.543387968 I0630 18:03:06.324290 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:03:06.324278728 +0000 UTC m=+438.578518272 I0630 18:03:06.346267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:06:24.873547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:06:24.873951 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-30 18:06:24.873919263 +0000 UTC m=+637.128158847 I0630 18:06:24.873963 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-30 18:06:24.873946574 +0000 UTC m=+637.128186128 I0630 18:06:24.902131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:06:24.902234 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-30 18:06:24.902224749 +0000 UTC m=+637.156464303 I0630 18:06:25.204084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:06:25.244751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4s8bp" condition "Approved" to 2026-06-30 18:06:25.244729693 +0000 UTC m=+637.498969267 I0630 18:06:25.273637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4s8bp" condition "Ready" to 2026-06-30 18:06:25.273620153 +0000 UTC m=+637.527859707 I0630 18:06:25.302380 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:06:25.30236568 +0000 UTC m=+637.556605234 I0630 18:06:25.322971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:06:25.324458 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:06:25.324449433 +0000 UTC m=+637.578688977 I0630 18:06:25.329180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:06:25.350893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:07:05.574335 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-30 18:07:05.574318969 +0000 UTC m=+677.828558503 I0630 18:07:05.574612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:07:05.581368 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-30 18:07:05.581355641 +0000 UTC m=+677.835595225 I0630 18:07:05.593574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:07:05.593696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:07:05.593716 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-30 18:07:05.593710365 +0000 UTC m=+677.847949909 I0630 18:07:05.937551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:07:05.948009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dr68z" condition "Approved" to 2026-06-30 18:07:05.947992849 +0000 UTC m=+678.202232433 I0630 18:07:05.966675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dr68z" condition "Ready" to 2026-06-30 18:07:05.966664838 +0000 UTC m=+678.220904392 I0630 18:07:05.997648 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:07:05.997634459 +0000 UTC m=+678.251874003 I0630 18:07:06.017396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"