I0629 05:48:45.645063 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0629 05:48:45.645240 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0629 05:48:45.649893 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0629 05:48:45.649930 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0629 05:48:45.649946 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0629 05:48:45.650456 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0629 05:48:45.650497 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0629 05:48:45.650468 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0629 05:48:45.656973 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0629 05:48:45.673591 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0629 05:48:45.677270 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0629 05:48:45.677443 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0629 05:48:45.679979 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0629 05:48:45.680010 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0629 05:48:45.685719 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0629 05:48:45.688518 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0629 05:48:45.690912 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0629 05:48:45.693436 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0629 05:48:45.696147 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0629 05:48:45.699250 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0629 05:48:45.704685 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0629 05:48:45.704723 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0629 05:48:45.704738 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0629 05:48:45.704731 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0629 05:48:45.708592 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0629 05:48:45.711978 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0629 05:48:45.713845 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0629 05:48:45.716436 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0629 05:48:45.718165 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0629 05:48:45.719831 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0629 05:48:45.719999 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0629 05:48:45.724692 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0629 05:48:45.726721 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0629 05:48:45.728372 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0629 05:48:45.731211 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:45.731537 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:45.731820 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:45.732091 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:45.732409 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:45.733754 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:45.745912 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:45.768655 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:45.788903 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:45.808307 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:45.834538 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0629 05:48:57.530540 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-29 05:48:57.53051645 +0000 UTC m=+11.910055326 I0629 05:48:58.240049 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:48:58.240387 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-29 05:48:58.240376881 +0000 UTC m=+12.619915757 I0629 05:48:58.240477 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-29 05:48:58.240412042 +0000 UTC m=+12.619950948 I0629 05:48:58.258811 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:48:58.258867 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-29 05:48:58.258861237 +0000 UTC m=+12.638400123 E0629 05:48:58.262756 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0629 05:48:58.262882 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-29 05:48:58.262872445 +0000 UTC m=+12.642411321 E0629 05:48:58.262926 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0629 05:48:58.274639 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0629 05:48:58.274688 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0629 05:48:58.275013 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0629 05:48:58.275053 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0629 05:48:58.275197 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0629 05:48:58.303167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-29 05:48:58.303157261 +0000 UTC m=+12.682696127 I0629 05:48:58.324754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-29 05:48:58.324743699 +0000 UTC m=+12.704282575 I0629 05:48:58.345438 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:48:58.345423312 +0000 UTC m=+12.724962218 I0629 05:48:58.358703 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:48:58.359182 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:48:58.359162395 +0000 UTC m=+12.738701281 I0629 05:48:58.371587 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:49:03.275681 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:49:03.275667015 +0000 UTC m=+17.655205911 I0629 05:49:26.099846 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-29 05:49:26.099806174 +0000 UTC m=+40.479345050 I0629 05:49:26.100129 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:49:26.100214 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-29 05:49:26.100205142 +0000 UTC m=+40.479744018 I0629 05:49:26.109667 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-29 05:49:26.109653488 +0000 UTC m=+40.489192364 I0629 05:49:26.116382 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:49:26.116466 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:49:26.116499 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-29 05:49:26.116491261 +0000 UTC m=+40.496030127 I0629 05:49:26.604952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-29 05:49:26.604935546 +0000 UTC m=+40.984474452 I0629 05:49:26.630439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-29 05:49:26.630423035 +0000 UTC m=+41.009961941 I0629 05:49:26.659773 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:49:26.65976321 +0000 UTC m=+41.039302086 I0629 05:49:26.673165 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:49:26.674371 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:49:26.674363326 +0000 UTC m=+41.053902202 I0629 05:49:26.690888 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:53:46.227559 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-124.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:53:46.227608 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Ready" to 2026-06-29 05:53:46.227579995 +0000 UTC m=+300.607118901 I0629 05:53:46.227633 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Issuing" to 2026-06-29 05:53:46.227623005 +0000 UTC m=+300.607161881 I0629 05:53:46.240005 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:53:46.240058 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-124.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:53:46.240082 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Issuing" to 2026-06-29 05:53:46.240072987 +0000 UTC m=+300.619611863 I0629 05:53:46.603398 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:53:46.618232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-124.nip.io-tls-1" condition "Approved" to 2026-06-29 05:53:46.618209941 +0000 UTC m=+300.997748817 I0629 05:53:46.640051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-124.nip.io-tls-1" condition "Ready" to 2026-06-29 05:53:46.640037903 +0000 UTC m=+301.019576789 I0629 05:53:46.663811 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:53:46.663798125 +0000 UTC m=+301.043337001 I0629 05:53:46.683287 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:53:46.683974 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:53:46.68396589 +0000 UTC m=+301.063504766 I0629 05:53:46.699290 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:54:50.252146 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-29 05:54:50.252130548 +0000 UTC m=+364.631669434 I0629 05:54:50.252598 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:54:50.252761 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-29 05:54:50.252747688 +0000 UTC m=+364.632286594 I0629 05:54:50.264535 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:54:50.264796 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:54:50.264866 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-29 05:54:50.264857529 +0000 UTC m=+364.644396415 E0629 05:54:50.265119 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0629 05:54:50.267240 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-29 05:54:50.265175994 +0000 UTC m=+364.644714870 E0629 05:54:50.267273 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0629 05:54:50.280377 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0629 05:54:50.280493 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0629 05:54:50.280522 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0629 05:54:50.280578 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0629 05:54:50.305927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-29 05:54:50.305913557 +0000 UTC m=+364.685452423 I0629 05:54:50.318401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-29 05:54:50.318389024 +0000 UTC m=+364.697927900 I0629 05:54:50.338387 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:54:50.338375324 +0000 UTC m=+364.717914200 I0629 05:54:50.350480 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:54:50.351056 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:54:50.351047605 +0000 UTC m=+364.730586481 I0629 05:54:50.361723 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:54:50.363567 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:54:55.281851 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:54:55.281835915 +0000 UTC m=+369.661374821 I0629 05:55:35.550022 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-29 05:55:35.54948339 +0000 UTC m=+409.929022246 I0629 05:55:35.550649 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:55:35.550666 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-29 05:55:35.550662901 +0000 UTC m=+409.930201767 I0629 05:55:35.563321 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:55:35.563360 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-29 05:55:35.563349946 +0000 UTC m=+409.942888812 I0629 05:55:35.563769 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-29 05:55:35.563759853 +0000 UTC m=+409.943298719 I0629 05:55:35.563951 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-29 05:55:35.563946767 +0000 UTC m=+409.943485633 I0629 05:55:35.564136 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:55:35.564162 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-29 05:55:35.564157151 +0000 UTC m=+409.943696017 I0629 05:55:35.576137 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:35.576193 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:55:35.576212 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-29 05:55:35.576205966 +0000 UTC m=+409.955744822 I0629 05:55:35.582178 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:35.585642 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-29 05:55:35.585625046 +0000 UTC m=+409.965163912 I0629 05:55:35.596810 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:35.597555 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-29 05:55:35.59754692 +0000 UTC m=+409.977085776 I0629 05:55:35.728805 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:35.752208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-29 05:55:35.752189276 +0000 UTC m=+410.131728192 I0629 05:55:35.768693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-29 05:55:35.768680307 +0000 UTC m=+410.148219183 I0629 05:55:35.786998 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:35.801967 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:55:35.801956093 +0000 UTC m=+410.181494959 I0629 05:55:35.813106 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:35.816213 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:35.818317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-29 05:55:35.818307802 +0000 UTC m=+410.197846678 I0629 05:55:35.827989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-29 05:55:35.827973508 +0000 UTC m=+410.207512364 I0629 05:55:35.833205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-29 05:55:35.833191767 +0000 UTC m=+410.212730643 I0629 05:55:35.930847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-29 05:55:35.9308314 +0000 UTC m=+410.310370296 I0629 05:55:36.578208 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:55:36.578192248 +0000 UTC m=+410.957731124 I0629 05:55:36.624174 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:36.728919 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:55:36.728898852 +0000 UTC m=+411.108437748 I0629 05:55:36.887724 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:36.888348 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:55:36.888339046 +0000 UTC m=+411.267877912 I0629 05:55:36.983333 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:36.983787 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:55:36.983779947 +0000 UTC m=+411.363318813 I0629 05:55:37.272997 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:37.375708 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:51.401126 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls" condition "Ready" to 2026-06-29 05:55:51.401095237 +0000 UTC m=+425.780634123 I0629 05:55:51.401531 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:55:51.401569 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls" condition "Issuing" to 2026-06-29 05:55:51.401563795 +0000 UTC m=+425.781102671 I0629 05:55:51.411140 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:51.411258 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls" condition "Ready" to 2026-06-29 05:55:51.411239206 +0000 UTC m=+425.790778072 I0629 05:55:51.716051 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:51.766433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls-1" condition "Approved" to 2026-06-29 05:55:51.766420489 +0000 UTC m=+426.145959365 I0629 05:55:51.780571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls-1" condition "Ready" to 2026-06-29 05:55:51.780561078 +0000 UTC m=+426.160099954 I0629 05:55:51.803781 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:55:51.803722737 +0000 UTC m=+426.183261603 I0629 05:55:51.814736 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:51.857888 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fkfd9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:57.153538 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-29 05:55:57.153525372 +0000 UTC m=+431.533064238 I0629 05:55:57.153860 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:55:57.153879 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-29 05:55:57.153875538 +0000 UTC m=+431.533414394 I0629 05:55:57.170485 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:57.170590 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:55:57.170729 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-29 05:55:57.170614386 +0000 UTC m=+431.550153292 I0629 05:55:57.506518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-29 05:55:57.506500735 +0000 UTC m=+431.886039641 I0629 05:55:57.526349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-29 05:55:57.526338969 +0000 UTC m=+431.905877845 I0629 05:55:57.549280 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:55:57.549263968 +0000 UTC m=+431.928802844 I0629 05:55:57.561084 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:57.561695 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:55:57.561687658 +0000 UTC m=+431.941226524 I0629 05:55:57.568882 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:55:57.579811 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:59:17.288763 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:59:17.288793 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-29 05:59:17.288775782 +0000 UTC m=+631.668314688 I0629 05:59:17.288853 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-29 05:59:17.288840793 +0000 UTC m=+631.668379699 I0629 05:59:17.301223 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:59:17.301288 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:59:17.301308 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-29 05:59:17.301301925 +0000 UTC m=+631.680840801 I0629 05:59:17.477112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-29 05:59:17.477098142 +0000 UTC m=+631.856637018 I0629 05:59:17.498638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-29 05:59:17.498629103 +0000 UTC m=+631.878167969 I0629 05:59:17.519751 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:59:17.519740846 +0000 UTC m=+631.899279722 I0629 05:59:17.536397 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:59:17.536795 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:59:17.536789514 +0000 UTC m=+631.916328370 I0629 05:59:17.551913 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:59:17.552284 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:59:17.552278908 +0000 UTC m=+631.931817774 I0629 05:59:17.552575 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:59:17.554623 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:59:59.602143 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-29 05:59:59.602133573 +0000 UTC m=+673.981672439 I0629 05:59:59.602509 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:59:59.602618 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-29 05:59:59.602606873 +0000 UTC m=+673.982145739 I0629 05:59:59.611157 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:59:59.611242 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0629 05:59:59.611267 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-29 05:59:59.611259876 +0000 UTC m=+673.990798752 I0629 05:59:59.845647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-29 05:59:59.845632606 +0000 UTC m=+674.225171482 I0629 05:59:59.869238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-29 05:59:59.869224146 +0000 UTC m=+674.248763032 I0629 05:59:59.902709 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:59:59.902689686 +0000 UTC m=+674.282228572 I0629 05:59:59.920289 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0629 05:59:59.921033 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-29 05:59:59.921025015 +0000 UTC m=+674.300563881 I0629 05:59:59.938424 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"