I0618 12:29:43.027949 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0618 12:29:43.028083 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0618 12:29:43.028159 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0618 12:29:43.034598 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0618 12:29:43.035571 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0618 12:29:43.035678 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0618 12:29:43.035699 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0618 12:29:43.038515 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0618 12:29:43.056469 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0618 12:29:43.061452 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0618 12:29:43.065290 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0618 12:29:43.070330 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0618 12:29:43.070446 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0618 12:29:43.073164 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0618 12:29:43.075312 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0618 12:29:43.075407 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0618 12:29:43.075429 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0618 12:29:43.075454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0618 12:29:43.077584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0618 12:29:43.079873 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0618 12:29:43.082075 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0618 12:29:43.084159 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0618 12:29:43.087702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0618 12:29:43.090612 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0618 12:29:43.090726 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0618 12:29:43.093195 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0618 12:29:43.093343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0618 12:29:43.095354 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0618 12:29:43.097507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0618 12:29:43.099642 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0618 12:29:43.101571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0618 12:29:43.103455 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0618 12:29:43.105993 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0618 12:29:43.110938 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:29:43.111002 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:29:43.111921 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:29:43.112673 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:29:43.135208 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:29:43.147756 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:29:43.166363 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:29:43.181527 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:29:43.197739 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:29:43.200057 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0618 12:29:54.734128 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-18 12:29:54.734107342 +0000 UTC m=+11.746109075 I0618 12:29:55.489974 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-18 12:29:55.489962976 +0000 UTC m=+12.501964709 I0618 12:29:55.490519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:29:55.490596 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-18 12:29:55.490587269 +0000 UTC m=+12.502589002 E0618 12:29:55.505789 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:29:55.505869 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-18 12:29:55.505862587 +0000 UTC m=+12.517864320 E0618 12:29:55.505893 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:29:55.506724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:29:55.506826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:29:55.506888 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-18 12:29:55.506881239 +0000 UTC m=+12.518882982 E0618 12:29:55.519408 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0618 12:29:55.520159 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:29:55.520375 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:29:55.521308 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0618 12:29:55.550748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lvnjx" condition "Approved" to 2026-06-18 12:29:55.550736769 +0000 UTC m=+12.562738502 I0618 12:29:55.568120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lvnjx" condition "Ready" to 2026-06-18 12:29:55.568109851 +0000 UTC m=+12.580111584 I0618 12:29:55.597099 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:29:55.597082002 +0000 UTC m=+12.609083735 I0618 12:29:55.611917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:29:55.612277 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:29:55.612268098 +0000 UTC m=+12.624269831 I0618 12:29:55.630855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:29:55.635858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:30:00.520745 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:30:00.52072535 +0000 UTC m=+17.532727083 I0618 12:30:24.284448 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-18 12:30:24.284397056 +0000 UTC m=+41.296398829 I0618 12:30:24.284835 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:30:24.284860 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-18 12:30:24.284856434 +0000 UTC m=+41.296858167 I0618 12:30:24.295062 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-18 12:30:24.295048271 +0000 UTC m=+41.307050004 I0618 12:30:24.321886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:30:24.321968 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-18 12:30:24.321960083 +0000 UTC m=+41.333961816 I0618 12:30:24.507539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:30:24.607636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tv287" condition "Approved" to 2026-06-18 12:30:24.607574802 +0000 UTC m=+41.619576525 I0618 12:30:24.647559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tv287" condition "Ready" to 2026-06-18 12:30:24.647542194 +0000 UTC m=+41.659543917 I0618 12:30:24.723397 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:30:24.723382632 +0000 UTC m=+41.735384385 I0618 12:30:24.761677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:30:24.872018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:36.230197 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-117.nip.io-tls" condition "Ready" to 2026-06-18 12:34:36.230180639 +0000 UTC m=+293.242182362 I0618 12:34:36.230625 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-117.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:34:36.230649 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-117.nip.io-tls" condition "Issuing" to 2026-06-18 12:34:36.23064428 +0000 UTC m=+293.242646013 I0618 12:34:36.251021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-117.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-117.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:36.251112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-117.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:34:36.251130 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-117.nip.io-tls" condition "Issuing" to 2026-06-18 12:34:36.251122584 +0000 UTC m=+293.263124317 I0618 12:34:36.750927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-117.nip.io-tls-4rph6" condition "Approved" to 2026-06-18 12:34:36.750914724 +0000 UTC m=+293.762916467 I0618 12:34:36.780436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-117.nip.io-tls-4rph6" condition "Ready" to 2026-06-18 12:34:36.780423538 +0000 UTC m=+293.792425281 I0618 12:34:36.809908 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-117.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:34:36.809891532 +0000 UTC m=+293.821893285 I0618 12:34:36.833494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-117.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-117.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:36.833739 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-117.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:34:36.833733938 +0000 UTC m=+293.845735661 I0618 12:34:36.844802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-117.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-117.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:36.858597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-117.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-117.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:34:36.858874 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-117.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:34:36.858866124 +0000 UTC m=+293.870867857 I0618 12:35:40.785233 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:35:40.785268 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-18 12:35:40.785261 +0000 UTC m=+357.797262733 I0618 12:35:40.785476 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-18 12:35:40.785457294 +0000 UTC m=+357.797459057 E0618 12:35:40.797116 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:35:40.797236 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-18 12:35:40.797228704 +0000 UTC m=+357.809230437 E0618 12:35:40.797307 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0618 12:35:40.801525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:35:40.802655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:35:40.802688 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-18 12:35:40.8026811 +0000 UTC m=+357.814682833 E0618 12:35:40.808252 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0618 12:35:40.808445 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:35:40.808532 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0618 12:35:40.808629 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0618 12:35:40.836428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:35:40.838120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bsjfq" condition "Approved" to 2026-06-18 12:35:40.838111563 +0000 UTC m=+357.850113296 I0618 12:35:40.849434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bsjfq" condition "Ready" to 2026-06-18 12:35:40.849423303 +0000 UTC m=+357.861425036 I0618 12:35:40.866984 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:35:40.866971616 +0000 UTC m=+357.878973369 I0618 12:35:40.885895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:35:40.930811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:35:45.808975 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:35:45.808954532 +0000 UTC m=+362.820956295 I0618 12:36:27.221228 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-18 12:36:27.221183752 +0000 UTC m=+404.233185475 I0618 12:36:27.221385 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:36:27.221422 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-18 12:36:27.221418107 +0000 UTC m=+404.233419830 I0618 12:36:27.240774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:36:27.240808 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-18 12:36:27.240802199 +0000 UTC m=+404.252803922 I0618 12:36:27.241110 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-18 12:36:27.241106644 +0000 UTC m=+404.253108357 I0618 12:36:27.241318 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-18 12:36:27.24131462 +0000 UTC m=+404.253316333 I0618 12:36:27.241449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:36:27.241463 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-18 12:36:27.241460712 +0000 UTC m=+404.253462425 I0618 12:36:27.271195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:27.271252 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-18 12:36:27.271246628 +0000 UTC m=+404.283248351 I0618 12:36:27.300652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:27.300738 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-18 12:36:27.300730179 +0000 UTC m=+404.312731902 I0618 12:36:27.305645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:27.305749 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-18 12:36:27.305742148 +0000 UTC m=+404.317743871 I0618 12:36:27.383472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:27.412099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:27.433472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qvg7j" condition "Approved" to 2026-06-18 12:36:27.433462942 +0000 UTC m=+404.445464675 I0618 12:36:27.442361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2xbwj" condition "Approved" to 2026-06-18 12:36:27.442352006 +0000 UTC m=+404.454353729 I0618 12:36:27.450704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:27.454634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qvg7j" condition "Ready" to 2026-06-18 12:36:27.454622838 +0000 UTC m=+404.466624591 I0618 12:36:27.455517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2xbwj" condition "Ready" to 2026-06-18 12:36:27.455501185 +0000 UTC m=+404.467502918 I0618 12:36:27.478186 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:36:27.478176381 +0000 UTC m=+404.490178124 I0618 12:36:27.484718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fx49w" condition "Approved" to 2026-06-18 12:36:27.48470087 +0000 UTC m=+404.496702613 I0618 12:36:27.484938 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:36:27.484930644 +0000 UTC m=+404.496932377 I0618 12:36:27.568911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:27.569171 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:36:27.569165293 +0000 UTC m=+404.581167016 I0618 12:36:27.957880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fx49w" condition "Ready" to 2026-06-18 12:36:27.957863454 +0000 UTC m=+404.969865177 I0618 12:36:27.974329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:27.974733 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:36:27.974728056 +0000 UTC m=+404.986729779 I0618 12:36:28.525690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:28.614979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:28.670137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:28.717136 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:36:28.71712272 +0000 UTC m=+405.729124443 I0618 12:36:28.965880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:28.966229 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:36:28.966221467 +0000 UTC m=+405.978223200 I0618 12:36:29.270901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:29.315072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:35.536058 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls" condition "Ready" to 2026-06-18 12:36:35.536032474 +0000 UTC m=+412.548034207 I0618 12:36:35.536254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:36:35.536286 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls" condition "Issuing" to 2026-06-18 12:36:35.53627844 +0000 UTC m=+412.548280173 I0618 12:36:35.551391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:35.551480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:36:35.551503 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls" condition "Issuing" to 2026-06-18 12:36:35.551496625 +0000 UTC m=+412.563498358 I0618 12:36:35.874686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jgfhx-qn8ff" condition "Approved" to 2026-06-18 12:36:35.874671588 +0000 UTC m=+412.886673321 I0618 12:36:35.893076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jgfhx-qn8ff" condition "Ready" to 2026-06-18 12:36:35.893067936 +0000 UTC m=+412.905069659 I0618 12:36:35.930460 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:36:35.930447264 +0000 UTC m=+412.942448987 I0618 12:36:35.945886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:35.946094 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:36:35.946085989 +0000 UTC m=+412.958087722 I0618 12:36:35.973949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jgfhx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:49.026620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:36:49.026648 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-18 12:36:49.026641671 +0000 UTC m=+426.038643394 I0618 12:36:49.026624 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-18 12:36:49.026601731 +0000 UTC m=+426.038603484 I0618 12:36:49.044059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:49.044376 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-18 12:36:49.044361871 +0000 UTC m=+426.056363684 I0618 12:36:49.117823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:36:49.154525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ddms6" condition "Approved" to 2026-06-18 12:36:49.154510138 +0000 UTC m=+426.166511881 I0618 12:36:49.180308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ddms6" condition "Ready" to 2026-06-18 12:36:49.180298611 +0000 UTC m=+426.192300344 I0618 12:36:49.215488 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:36:49.215473994 +0000 UTC m=+426.227475727 I0618 12:36:49.238477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:14.281015 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-18 12:40:14.280990475 +0000 UTC m=+631.292992228 I0618 12:40:14.281103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:40:14.281129 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-18 12:40:14.281121738 +0000 UTC m=+631.293123471 I0618 12:40:14.300121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:14.300431 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-18 12:40:14.300418631 +0000 UTC m=+631.312420384 I0618 12:40:14.691894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:14.779271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-smmz9" condition "Approved" to 2026-06-18 12:40:14.779262972 +0000 UTC m=+631.791264695 I0618 12:40:14.816561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-smmz9" condition "Ready" to 2026-06-18 12:40:14.816554377 +0000 UTC m=+631.828556100 I0618 12:40:14.846486 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:40:14.846467439 +0000 UTC m=+631.858469162 I0618 12:40:14.872942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:14.873313 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:40:14.873304968 +0000 UTC m=+631.885306721 I0618 12:40:14.907305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:55.501572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:40:55.501893 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-18 12:40:55.501875678 +0000 UTC m=+672.513877411 I0618 12:40:55.501790 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-18 12:40:55.501761003 +0000 UTC m=+672.513762736 I0618 12:40:55.515664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:55.515867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0618 12:40:55.515985 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-18 12:40:55.5159781 +0000 UTC m=+672.527979853 I0618 12:40:55.681063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-67zcf" condition "Approved" to 2026-06-18 12:40:55.681048055 +0000 UTC m=+672.693049798 I0618 12:40:55.707754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-67zcf" condition "Ready" to 2026-06-18 12:40:55.707732648 +0000 UTC m=+672.719734371 I0618 12:40:55.730161 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:40:55.730149284 +0000 UTC m=+672.742151007 I0618 12:40:55.754890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0618 12:40:55.755622 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-18 12:40:55.75561342 +0000 UTC m=+672.767615143 I0618 12:40:55.779156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"