I0628 19:50:36.764350 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0628 19:50:36.764526 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0628 19:50:36.764713 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0628 19:50:36.769956 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0628 19:50:36.770488 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0628 19:50:36.770501 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0628 19:50:36.770576 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0628 19:50:36.773914 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0628 19:50:36.793470 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0628 19:50:36.799720 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0628 19:50:36.808436 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0628 19:50:36.808486 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0628 19:50:36.808491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0628 19:50:36.808504 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0628 19:50:36.813500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0628 19:50:36.815611 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0628 19:50:36.817692 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0628 19:50:36.819702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0628 19:50:36.821535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0628 19:50:36.824734 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0628 19:50:36.825101 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0628 19:50:36.828953 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0628 19:50:36.830749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0628 19:50:36.832446 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0628 19:50:36.834327 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0628 19:50:36.836374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0628 19:50:36.838172 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0628 19:50:36.838328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0628 19:50:36.841182 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0628 19:50:36.841256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0628 19:50:36.848457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0628 19:50:36.852977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0628 19:50:36.857002 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0628 19:50:36.859728 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:50:36.860320 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:50:36.860519 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:50:36.878015 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:50:36.899130 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:50:36.908227 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:50:36.921043 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:50:36.939147 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:50:36.946929 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:50:36.954901 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:50:50.424073 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-28 19:50:50.424027017 +0000 UTC m=+13.691863654 I0628 19:50:51.153270 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-28 19:50:51.153249934 +0000 UTC m=+14.421086601 I0628 19:50:51.153349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:50:51.153445 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-28 19:50:51.153434018 +0000 UTC m=+14.421270685 I0628 19:50:51.167233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:50:51.167306 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-28 19:50:51.167295411 +0000 UTC m=+14.435132068 E0628 19:50:51.168335 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 19:50:51.168426 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-28 19:50:51.168416627 +0000 UTC m=+14.436253264 E0628 19:50:51.168454 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:50:51.176904 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0628 19:50:51.177110 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:50:51.177270 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:50:51.177378 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0628 19:50:51.185357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:50:51.206422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8699x" condition "Approved" to 2026-06-28 19:50:51.206404705 +0000 UTC m=+14.474241372 I0628 19:50:51.218300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8699x" condition "Ready" to 2026-06-28 19:50:51.218286193 +0000 UTC m=+14.486122830 I0628 19:50:51.238203 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:50:51.238183933 +0000 UTC m=+14.506020590 I0628 19:50:51.258589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:50:56.178054 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:50:56.178038988 +0000 UTC m=+19.445875645 I0628 19:51:18.827412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:51:18.827479 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-28 19:51:18.827452839 +0000 UTC m=+42.095289486 I0628 19:51:18.828868 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-28 19:51:18.82884257 +0000 UTC m=+42.096679207 I0628 19:51:18.861739 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-28 19:51:18.861725215 +0000 UTC m=+42.129561842 I0628 19:51:18.862893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:51:18.863074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:51:18.863106 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-28 19:51:18.863101936 +0000 UTC m=+42.130938563 I0628 19:51:19.112750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:51:19.120376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q2h7j" condition "Approved" to 2026-06-28 19:51:19.12036477 +0000 UTC m=+42.388201407 I0628 19:51:19.166509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q2h7j" condition "Ready" to 2026-06-28 19:51:19.166496949 +0000 UTC m=+42.434333586 I0628 19:51:19.203423 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:51:19.203408557 +0000 UTC m=+42.471245194 I0628 19:51:19.227599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:55:41.562807 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-06-28 19:55:41.562782273 +0000 UTC m=+304.830618910 I0628 19:55:41.562885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-156.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:55:41.562931 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Issuing" to 2026-06-28 19:55:41.562919085 +0000 UTC m=+304.830755722 I0628 19:55:41.582639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:55:41.582737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-156.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:55:41.582762 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Issuing" to 2026-06-28 19:55:41.582751754 +0000 UTC m=+304.850588421 I0628 19:55:41.748940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:55:41.759732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-r6tbb" condition "Approved" to 2026-06-28 19:55:41.759714088 +0000 UTC m=+305.027550745 I0628 19:55:41.787429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-r6tbb" condition "Ready" to 2026-06-28 19:55:41.787414974 +0000 UTC m=+305.055251601 I0628 19:55:41.848407 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:55:41.848366568 +0000 UTC m=+305.116203195 I0628 19:55:41.888018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:46.918094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:56:46.918179 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-28 19:56:46.918141971 +0000 UTC m=+370.185978668 I0628 19:56:46.918500 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-28 19:56:46.918475852 +0000 UTC m=+370.186312509 E0628 19:56:46.932025 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 19:56:46.932066 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-28 19:56:46.932058129 +0000 UTC m=+370.199894766 E0628 19:56:46.932122 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 19:56:46.937423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:46.937482 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-28 19:56:46.937474917 +0000 UTC m=+370.205311554 E0628 19:56:46.947605 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0628 19:56:46.947920 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:56:46.947953 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:56:46.948002 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0628 19:56:46.953551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:46.953634 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-28 19:56:46.953616258 +0000 UTC m=+370.221452895 I0628 19:56:46.963259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vgv7w" condition "Approved" to 2026-06-28 19:56:46.963242605 +0000 UTC m=+370.231079272 I0628 19:56:46.983232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vgv7w" condition "Ready" to 2026-06-28 19:56:46.983216122 +0000 UTC m=+370.251052779 I0628 19:56:47.009298 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:56:47.00927764 +0000 UTC m=+370.277114297 I0628 19:56:47.038979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:47.039265 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:56:47.039256412 +0000 UTC m=+370.307093049 I0628 19:56:47.046124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:47.055613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:51.949016 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:56:51.949000018 +0000 UTC m=+375.216836675 I0628 19:57:34.296859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:34.296885 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-28 19:57:34.296846812 +0000 UTC m=+417.564683449 I0628 19:57:34.301553 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-28 19:57:34.301532497 +0000 UTC m=+417.569369234 I0628 19:57:34.326832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:34.326890 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-28 19:57:34.326881022 +0000 UTC m=+417.594717679 I0628 19:57:34.327463 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-28 19:57:34.327457505 +0000 UTC m=+417.595294142 I0628 19:57:34.335073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:34.335112 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-28 19:57:34.335103578 +0000 UTC m=+417.602940205 I0628 19:57:34.335687 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-28 19:57:34.335672261 +0000 UTC m=+417.603508888 I0628 19:57:34.371551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:34.371659 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-28 19:57:34.371600685 +0000 UTC m=+417.639437302 I0628 19:57:34.371984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:34.372016 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-28 19:57:34.372013391 +0000 UTC m=+417.639850008 I0628 19:57:34.421811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:34.429321 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:34.438125 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-28 19:57:34.429388896 +0000 UTC m=+417.697225523 I0628 19:57:34.668040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:34.691438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q6jdw" condition "Approved" to 2026-06-28 19:57:34.691426763 +0000 UTC m=+417.959263390 I0628 19:57:34.719576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-77lgq" condition "Approved" to 2026-06-28 19:57:34.719336659 +0000 UTC m=+417.987173296 I0628 19:57:34.724655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q6jdw" condition "Ready" to 2026-06-28 19:57:34.724640179 +0000 UTC m=+417.992476816 I0628 19:57:34.740330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-77lgq" condition "Ready" to 2026-06-28 19:57:34.740319051 +0000 UTC m=+418.008155678 I0628 19:57:34.766316 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:34.766301491 +0000 UTC m=+418.034138128 I0628 19:57:34.781562 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:34.781548135 +0000 UTC m=+418.049384762 I0628 19:57:34.787962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:34.804263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:34.804530 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:34.804524286 +0000 UTC m=+418.072360913 I0628 19:57:34.825104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:34.825299 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:34.825294199 +0000 UTC m=+418.093130826 I0628 19:57:34.832149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:34.984289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:35.184313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:35.346129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ptrqh" condition "Approved" to 2026-06-28 19:57:35.346110254 +0000 UTC m=+418.613946911 I0628 19:57:35.495137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ptrqh" condition "Ready" to 2026-06-28 19:57:35.495121758 +0000 UTC m=+418.762958415 I0628 19:57:35.887048 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:35.887030947 +0000 UTC m=+419.154867604 I0628 19:57:35.986214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:35.986620 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:35.986611456 +0000 UTC m=+419.254448083 I0628 19:57:36.238203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:36.287024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:43.377920 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:43.378039 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" condition "Issuing" to 2026-06-28 19:57:43.377993594 +0000 UTC m=+426.645830281 I0628 19:57:43.378409 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" condition "Ready" to 2026-06-28 19:57:43.378401741 +0000 UTC m=+426.646238388 I0628 19:57:43.404460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:43.404539 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" condition "Ready" to 2026-06-28 19:57:43.404530713 +0000 UTC m=+426.672367350 I0628 19:57:43.813519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:43.855768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xkmz2-s86k8" condition "Approved" to 2026-06-28 19:57:43.855756053 +0000 UTC m=+427.123592700 I0628 19:57:43.874603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xkmz2-s86k8" condition "Ready" to 2026-06-28 19:57:43.874590188 +0000 UTC m=+427.142426815 I0628 19:57:43.903341 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:43.903310666 +0000 UTC m=+427.171147303 I0628 19:57:43.942875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:43.943280 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:43.94327362 +0000 UTC m=+427.211110247 I0628 19:57:43.965339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:43.965688 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xkmz2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:43.965679361 +0000 UTC m=+427.233515998 I0628 19:57:56.766128 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-28 19:57:56.766098873 +0000 UTC m=+440.033935500 I0628 19:57:56.766377 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:56.766409 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-28 19:57:56.766400495 +0000 UTC m=+440.034237142 I0628 19:57:56.793198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:56.793293 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-28 19:57:56.793286064 +0000 UTC m=+440.061122691 I0628 19:57:57.469776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:57.510316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fq9m7" condition "Approved" to 2026-06-28 19:57:57.510301399 +0000 UTC m=+440.778138036 I0628 19:57:57.529446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fq9m7" condition "Ready" to 2026-06-28 19:57:57.529435824 +0000 UTC m=+440.797272451 I0628 19:57:57.552557 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:57.552543456 +0000 UTC m=+440.820380093 I0628 19:57:57.571537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:57.633468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:01:07.125962 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-28 20:01:07.125942557 +0000 UTC m=+630.393779194 I0628 20:01:07.126006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:01:07.126095 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-28 20:01:07.126086554 +0000 UTC m=+630.393923191 I0628 20:01:07.144512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:01:07.144726 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-28 20:01:07.144714365 +0000 UTC m=+630.412551002 I0628 20:01:07.254595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:01:07.290903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2ss5s" condition "Approved" to 2026-06-28 20:01:07.29089431 +0000 UTC m=+630.558730927 I0628 20:01:07.312399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2ss5s" condition "Ready" to 2026-06-28 20:01:07.312387409 +0000 UTC m=+630.580224036 I0628 20:01:07.351735 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:01:07.351720479 +0000 UTC m=+630.619557106 I0628 20:01:07.369811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:01:07.370210 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:01:07.370203943 +0000 UTC m=+630.638040570 I0628 20:01:07.393639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:01:46.272560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:01:46.272557 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-28 20:01:46.272534813 +0000 UTC m=+669.540371460 I0628 20:01:46.272597 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-28 20:01:46.272589745 +0000 UTC m=+669.540426372 I0628 20:01:46.301538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:01:46.301611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:01:46.301625 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-28 20:01:46.301620175 +0000 UTC m=+669.569456802 I0628 20:01:46.538372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vchff" condition "Approved" to 2026-06-28 20:01:46.538356785 +0000 UTC m=+669.806193412 I0628 20:01:46.556469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vchff" condition "Ready" to 2026-06-28 20:01:46.556457272 +0000 UTC m=+669.824293909 I0628 20:01:46.593838 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:01:46.593826608 +0000 UTC m=+669.861663235 I0628 20:01:46.616889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"