I0626 10:16:02.039575 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0626 10:16:02.039851 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0626 10:16:02.040012 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0626 10:16:02.045161 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0626 10:16:02.045564 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0626 10:16:02.045612 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0626 10:16:02.045679 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0626 10:16:02.048112 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0626 10:16:02.067005 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0626 10:16:02.067429 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0626 10:16:02.073923 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0626 10:16:02.080016 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0626 10:16:02.082732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0626 10:16:02.085335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0626 10:16:02.088622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0626 10:16:02.091389 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0626 10:16:02.092582 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0626 10:16:02.092599 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0626 10:16:02.092605 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0626 10:16:02.092706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0626 10:16:02.095016 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0626 10:16:02.099063 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0626 10:16:02.102413 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0626 10:16:02.104893 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0626 10:16:02.107660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0626 10:16:02.110025 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0626 10:16:02.110083 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0626 10:16:02.110079 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0626 10:16:02.112544 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0626 10:16:02.114380 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0626 10:16:02.116190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0626 10:16:02.121153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0626 10:16:02.123431 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0626 10:16:02.126523 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:02.126748 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:02.126907 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:02.129265 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:02.143399 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:02.165861 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:02.179981 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:02.198609 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:02.215929 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:02.217209 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:16:15.145785 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-26 10:16:15.145749794 +0000 UTC m=+13.139736711 I0626 10:16:15.928863 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-26 10:16:15.92884568 +0000 UTC m=+13.922832617 I0626 10:16:15.930009 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:16:15.930963 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-26 10:16:15.930955541 +0000 UTC m=+13.924942488 E0626 10:16:16.303101 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:16:16.303230 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-26 10:16:16.303220808 +0000 UTC m=+14.297207725 E0626 10:16:16.303313 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:16:16.308156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:16:16.308381 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:16:16.308556 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-26 10:16:16.30854165 +0000 UTC m=+14.302528597 E0626 10:16:16.635537 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0626 10:16:16.635709 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:16:16.635841 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:16:16.636066 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0626 10:16:17.292254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nk7wn" condition "Approved" to 2026-06-26 10:16:17.292233111 +0000 UTC m=+15.286220068 I0626 10:16:17.935645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nk7wn" condition "Ready" to 2026-06-26 10:16:17.935625426 +0000 UTC m=+15.929612373 I0626 10:16:18.395515 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:16:18.39549941 +0000 UTC m=+16.389486327 I0626 10:16:18.535193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:16:18.535664 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:16:18.535655529 +0000 UTC m=+16.529642446 I0626 10:16:18.678540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:16:21.637000 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:16:21.636932875 +0000 UTC m=+19.630919812 I0626 10:17:14.393723 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-26 10:17:14.393681894 +0000 UTC m=+72.387668811 I0626 10:17:14.394186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:17:14.394412 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-26 10:17:14.394384225 +0000 UTC m=+72.388371142 I0626 10:17:14.411309 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-26 10:17:14.411293911 +0000 UTC m=+72.405280858 I0626 10:17:14.417850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:17:14.419819 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-26 10:17:14.419810786 +0000 UTC m=+72.413797703 I0626 10:17:14.630344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:17:15.069833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xwjzx" condition "Approved" to 2026-06-26 10:17:15.069817871 +0000 UTC m=+73.063804808 I0626 10:17:15.117987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xwjzx" condition "Ready" to 2026-06-26 10:17:15.117969111 +0000 UTC m=+73.111956008 I0626 10:17:15.152246 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:17:15.152219519 +0000 UTC m=+73.146206436 I0626 10:17:15.191922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:06.365055 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Ready" to 2026-06-26 10:23:06.365016693 +0000 UTC m=+424.359003640 I0626 10:23:06.365212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-202.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:23:06.365256 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Issuing" to 2026-06-26 10:23:06.365246637 +0000 UTC m=+424.359233574 I0626 10:23:06.383731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:06.383794 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Ready" to 2026-06-26 10:23:06.383787232 +0000 UTC m=+424.377774149 I0626 10:23:06.473439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:06.500779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-202.nip.io-tls-8tmqb" condition "Approved" to 2026-06-26 10:23:06.500762904 +0000 UTC m=+424.494749851 I0626 10:23:06.526335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-202.nip.io-tls-8tmqb" condition "Ready" to 2026-06-26 10:23:06.526320658 +0000 UTC m=+424.520307605 I0626 10:23:06.561455 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:06.561437033 +0000 UTC m=+424.555423950 I0626 10:23:06.578828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:07.836060 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:24:07.836094 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-26 10:24:07.836086369 +0000 UTC m=+485.830073286 I0626 10:24:07.836609 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-26 10:24:07.836590947 +0000 UTC m=+485.830577864 I0626 10:24:07.853934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:07.853993 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-26 10:24:07.853985924 +0000 UTC m=+485.847972841 E0626 10:24:07.857251 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:24:07.857291 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-26 10:24:07.857282796 +0000 UTC m=+485.851269713 E0626 10:24:07.857350 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:24:07.867232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0626 10:24:07.871941 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0626 10:24:07.872148 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:24:07.872176 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:24:07.872213 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0626 10:24:07.887550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2fw2h" condition "Approved" to 2026-06-26 10:24:07.887540807 +0000 UTC m=+485.881527714 I0626 10:24:07.901537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2fw2h" condition "Ready" to 2026-06-26 10:24:07.901525249 +0000 UTC m=+485.895512176 I0626 10:24:07.923922 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:07.923907634 +0000 UTC m=+485.917894571 I0626 10:24:07.941357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:07.941653 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:07.941647626 +0000 UTC m=+485.935634533 I0626 10:24:07.953992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:07.954229 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:07.954222455 +0000 UTC m=+485.948209372 I0626 10:24:12.873312 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:12.873287681 +0000 UTC m=+490.867274608 I0626 10:24:53.804560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:24:53.804597 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-26 10:24:53.804590606 +0000 UTC m=+531.798577503 I0626 10:24:53.804829 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-26 10:24:53.804819309 +0000 UTC m=+531.798806216 I0626 10:24:53.804867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:24:53.804922 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-26 10:24:53.804914631 +0000 UTC m=+531.798901548 I0626 10:24:53.805098 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-26 10:24:53.805093723 +0000 UTC m=+531.799080630 I0626 10:24:53.829643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:24:53.829748 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-26 10:24:53.829732352 +0000 UTC m=+531.823719269 I0626 10:24:53.829837 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-26 10:24:53.829796073 +0000 UTC m=+531.823782990 I0626 10:24:53.854583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:53.854685 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-26 10:24:53.854680335 +0000 UTC m=+531.848667232 I0626 10:24:53.854956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:53.854981 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-26 10:24:53.85497909 +0000 UTC m=+531.848965997 I0626 10:24:53.869405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:53.869468 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-26 10:24:53.869462122 +0000 UTC m=+531.863449029 I0626 10:24:53.983583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:54.031196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5dbcq" condition "Approved" to 2026-06-26 10:24:54.031185006 +0000 UTC m=+532.025171903 I0626 10:24:54.051387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5dbcq" condition "Ready" to 2026-06-26 10:24:54.051377606 +0000 UTC m=+532.045364523 I0626 10:24:54.077388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:54.091564 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:54.091130086 +0000 UTC m=+532.085117003 I0626 10:24:54.118707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:54.118996 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:54.118990273 +0000 UTC m=+532.112977180 I0626 10:24:54.163447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cjr6p" condition "Approved" to 2026-06-26 10:24:54.163434116 +0000 UTC m=+532.157421043 I0626 10:24:54.172763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0626 10:24:54.185954 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-2bb9j\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0626 10:24:54.191844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cjr6p" condition "Ready" to 2026-06-26 10:24:54.191835872 +0000 UTC m=+532.185822779 I0626 10:24:54.221503 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:54.221492927 +0000 UTC m=+532.215479834 I0626 10:24:54.278266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:54.278640 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:54.278634374 +0000 UTC m=+532.272621311 I0626 10:24:54.538238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:54.582541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:54.729140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:54.913331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qz28l" condition "Approved" to 2026-06-26 10:24:54.913316055 +0000 UTC m=+532.907302972 I0626 10:24:55.240406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qz28l" condition "Ready" to 2026-06-26 10:24:55.240396074 +0000 UTC m=+533.234382981 I0626 10:24:55.434103 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:55.434089685 +0000 UTC m=+533.428076592 I0626 10:24:55.531778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:55.827967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:25:04.545176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:25:04.545785 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls" condition "Ready" to 2026-06-26 10:25:04.545765839 +0000 UTC m=+542.539752776 I0626 10:25:04.545826 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls" condition "Issuing" to 2026-06-26 10:25:04.54581747 +0000 UTC m=+542.539804367 I0626 10:25:04.574729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:25:04.574860 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls" condition "Ready" to 2026-06-26 10:25:04.574852642 +0000 UTC m=+542.568839559 I0626 10:25:05.008891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:25:05.172805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nk4k8-nn8gt" condition "Approved" to 2026-06-26 10:25:05.172794345 +0000 UTC m=+543.166781252 I0626 10:25:05.220346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nk4k8-nn8gt" condition "Ready" to 2026-06-26 10:25:05.22033502 +0000 UTC m=+543.214321937 I0626 10:25:05.321543 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:25:05.321531823 +0000 UTC m=+543.315518730 I0626 10:25:05.807545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:25:05.807856 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:25:05.80784975 +0000 UTC m=+543.801836667 I0626 10:25:05.842854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nk4k8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:25:19.021693 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-26 10:25:19.021676125 +0000 UTC m=+557.015663062 I0626 10:25:19.021852 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:25:19.021885 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-26 10:25:19.021879579 +0000 UTC m=+557.015866486 I0626 10:25:19.043732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:25:19.044044 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-26 10:25:19.044036524 +0000 UTC m=+557.038023461 I0626 10:25:19.200954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:25:19.235461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jjg8l" condition "Approved" to 2026-06-26 10:25:19.235430111 +0000 UTC m=+557.229417038 I0626 10:25:19.255301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jjg8l" condition "Ready" to 2026-06-26 10:25:19.255292472 +0000 UTC m=+557.249279379 I0626 10:25:19.290846 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:25:19.29083633 +0000 UTC m=+557.284823247 I0626 10:25:19.314734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:28:29.486028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:28:29.486029 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-26 10:28:29.485980879 +0000 UTC m=+747.479967856 I0626 10:28:29.486093 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-26 10:28:29.486084943 +0000 UTC m=+747.480071860 I0626 10:28:29.503615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:28:29.503673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:28:29.503691 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-26 10:28:29.503685965 +0000 UTC m=+747.497672872 I0626 10:28:29.829093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wttzb" condition "Approved" to 2026-06-26 10:28:29.829077583 +0000 UTC m=+747.823064510 I0626 10:28:29.845511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wttzb" condition "Ready" to 2026-06-26 10:28:29.845500963 +0000 UTC m=+747.839487880 I0626 10:28:29.871404 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:28:29.871392464 +0000 UTC m=+747.865379381 I0626 10:28:29.897113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:28:29.897988 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:28:29.897978878 +0000 UTC m=+747.891965805 I0626 10:28:29.908764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:28:29.916265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:28:29.916493 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:28:29.916486283 +0000 UTC m=+747.910473200 I0626 10:29:08.710302 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-26 10:29:08.710265143 +0000 UTC m=+786.704252060 I0626 10:29:08.711079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:29:08.711255 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-26 10:29:08.711244726 +0000 UTC m=+786.705231693 I0626 10:29:08.727035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:29:08.727112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:29:08.727133 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-26 10:29:08.727125954 +0000 UTC m=+786.721112891 I0626 10:29:09.036152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:29:09.042264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-sv77x" condition "Approved" to 2026-06-26 10:29:09.042251857 +0000 UTC m=+787.036238774 I0626 10:29:09.063247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-sv77x" condition "Ready" to 2026-06-26 10:29:09.063237334 +0000 UTC m=+787.057224241 I0626 10:29:09.092983 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:29:09.092970451 +0000 UTC m=+787.086957348 I0626 10:29:09.110822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:29:09.111381 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:29:09.111373973 +0000 UTC m=+787.105360880 I0626 10:29:09.131021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"