I0630 17:55:11.808778 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0630 17:55:11.808914 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0630 17:55:11.809130 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0630 17:55:11.813674 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0630 17:55:11.814231 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0630 17:55:11.814303 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0630 17:55:11.814340 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0630 17:55:11.816980 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0630 17:55:11.832036 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0630 17:55:11.832205 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0630 17:55:11.835780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0630 17:55:11.841655 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0630 17:55:11.844969 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0630 17:55:11.845003 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0630 17:55:11.845012 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0630 17:55:11.847673 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0630 17:55:11.850033 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0630 17:55:11.852970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0630 17:55:11.855046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0630 17:55:11.860630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0630 17:55:11.863872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0630 17:55:11.866296 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0630 17:55:11.868743 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0630 17:55:11.871213 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0630 17:55:11.871325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0630 17:55:11.873321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0630 17:55:11.875083 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0630 17:55:11.876741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0630 17:55:11.878564 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0630 17:55:11.884069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0630 17:55:11.886588 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0630 17:55:11.886621 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0630 17:55:11.887210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0630 17:55:11.889091 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:11.891331 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:11.892027 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:11.908946 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:11.924043 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:11.985702 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:12.000674 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:12.001297 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:12.020516 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:12.043752 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:24.712025 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-30 17:55:24.712008618 +0000 UTC m=+12.942313784 I0630 17:55:25.498169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:55:25.498231 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-30 17:55:25.498207124 +0000 UTC m=+13.728512300 I0630 17:55:25.498484 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 17:55:25.498457647 +0000 UTC m=+13.728762823 E0630 17:55:25.514352 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 17:55:25.514410 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-30 17:55:25.514404028 +0000 UTC m=+13.744709174 E0630 17:55:25.514432 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 17:55:25.520666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:25.521361 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 17:55:25.521347086 +0000 UTC m=+13.751652262 E0630 17:55:25.536802 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0630 17:55:25.537727 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 17:55:25.537851 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 17:55:25.538396 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0630 17:55:25.537018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:25.538555 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 17:55:25.538544804 +0000 UTC m=+13.768849950 I0630 17:55:25.539591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:25.545807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r54t9" condition "Approved" to 2026-06-30 17:55:25.545793476 +0000 UTC m=+13.776098612 I0630 17:55:25.554521 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 17:55:25.554508316 +0000 UTC m=+13.784813472 I0630 17:55:25.556744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r54t9" condition "Ready" to 2026-06-30 17:55:25.556738113 +0000 UTC m=+13.787043249 I0630 17:55:25.563215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:25.580073 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:25.580057549 +0000 UTC m=+13.810362675 I0630 17:55:25.594209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:25.598071 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:25.594853516 +0000 UTC m=+13.825158692 I0630 17:55:25.611522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:25.617596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:25.621770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:25.622115 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:25.622105771 +0000 UTC m=+13.852410917 I0630 17:55:30.538527 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:30.538514236 +0000 UTC m=+18.768819402 I0630 17:55:50.904039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:55:50.904101 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-30 17:55:50.904094499 +0000 UTC m=+39.134399655 I0630 17:55:50.904311 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-30 17:55:50.903753701 +0000 UTC m=+39.134058847 I0630 17:55:50.920463 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-30 17:55:50.920444461 +0000 UTC m=+39.150749597 I0630 17:55:50.940289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:50.940347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:55:50.940361 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-30 17:55:50.940355405 +0000 UTC m=+39.170660541 I0630 17:55:51.195268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:51.202397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-r8pb5" condition "Approved" to 2026-06-30 17:55:51.202389717 +0000 UTC m=+39.432694853 I0630 17:55:51.242551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-r8pb5" condition "Ready" to 2026-06-30 17:55:51.242536684 +0000 UTC m=+39.472841830 I0630 17:55:51.274736 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:51.274718668 +0000 UTC m=+39.505023814 I0630 17:55:51.295017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:51.295421 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:51.295414856 +0000 UTC m=+39.525720002 I0630 17:55:51.315054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:18.804747 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:00:18.804811 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Issuing" to 2026-06-30 18:00:18.804803542 +0000 UTC m=+307.035108718 I0630 18:00:18.805351 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready" to 2026-06-30 18:00:18.804703131 +0000 UTC m=+307.035008307 I0630 18:00:18.818776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:18.819057 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:00:18.819156 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Issuing" to 2026-06-30 18:00:18.81914814 +0000 UTC m=+307.049453286 I0630 18:00:19.044560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-157.nip.io-tls-bfcqm" condition "Approved" to 2026-06-30 18:00:19.044533402 +0000 UTC m=+307.274838548 I0630 18:00:19.077613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-157.nip.io-tls-bfcqm" condition "Ready" to 2026-06-30 18:00:19.077600664 +0000 UTC m=+307.307905800 I0630 18:00:19.103104 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:00:19.103091376 +0000 UTC m=+307.333396522 I0630 18:00:19.137451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:19.138055 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:00:19.138045764 +0000 UTC m=+307.368350900 I0630 18:00:19.143440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:19.227938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:22.692748 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-30 18:01:22.692724732 +0000 UTC m=+370.923029868 I0630 18:01:22.693092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:01:22.693107 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-30 18:01:22.693103901 +0000 UTC m=+370.923409037 E0630 18:01:22.703499 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 18:01:22.703608 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-30 18:01:22.70359324 +0000 UTC m=+370.933898406 E0630 18:01:22.706906 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 18:01:22.709103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:22.709172 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-30 18:01:22.709166661 +0000 UTC m=+370.939471807 I0630 18:01:22.720210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0630 18:01:22.722051 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0630 18:01:22.722138 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 18:01:22.722164 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 18:01:22.722206 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0630 18:01:22.734057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8tnp7" condition "Approved" to 2026-06-30 18:01:22.734042499 +0000 UTC m=+370.964347625 I0630 18:01:22.744925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8tnp7" condition "Ready" to 2026-06-30 18:01:22.744912707 +0000 UTC m=+370.975217853 I0630 18:01:22.763431 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:22.763421078 +0000 UTC m=+370.993726224 I0630 18:01:22.782509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:22.782714 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:22.782708695 +0000 UTC m=+371.013013841 I0630 18:01:22.798255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:22.798492 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:22.79848279 +0000 UTC m=+371.028787926 I0630 18:01:27.723457 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:27.72343932 +0000 UTC m=+375.953744496 I0630 18:02:06.342770 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:06.342800 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-30 18:02:06.342794082 +0000 UTC m=+414.573099218 I0630 18:02:06.344007 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-30 18:02:06.343993343 +0000 UTC m=+414.574298499 I0630 18:02:06.345137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:06.345156 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-30 18:02:06.345153522 +0000 UTC m=+414.575458658 I0630 18:02:06.348319 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-30 18:02:06.34830629 +0000 UTC m=+414.578611426 I0630 18:02:06.375708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:06.375741 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-30 18:02:06.375734626 +0000 UTC m=+414.606039762 I0630 18:02:06.376035 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-30 18:02:06.376030794 +0000 UTC m=+414.606335930 I0630 18:02:06.389895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:06.390042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:06.390096 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-30 18:02:06.390087755 +0000 UTC m=+414.620392901 I0630 18:02:06.402111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:06.402177 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-30 18:02:06.402171977 +0000 UTC m=+414.632477113 I0630 18:02:06.418961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:06.419046 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-30 18:02:06.419036638 +0000 UTC m=+414.649341774 I0630 18:02:06.753646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:06.757639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:06.780975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zkstq" condition "Approved" to 2026-06-30 18:02:06.780966149 +0000 UTC m=+415.011271295 I0630 18:02:06.783064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7g88g" condition "Approved" to 2026-06-30 18:02:06.78303684 +0000 UTC m=+415.013341986 I0630 18:02:06.787812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:06.796845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w44xk" condition "Approved" to 2026-06-30 18:02:06.796837755 +0000 UTC m=+415.027142891 I0630 18:02:06.805021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zkstq" condition "Ready" to 2026-06-30 18:02:06.80501376 +0000 UTC m=+415.035318896 I0630 18:02:06.808114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7g88g" condition "Ready" to 2026-06-30 18:02:06.808100927 +0000 UTC m=+415.038406073 I0630 18:02:06.811258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w44xk" condition "Ready" to 2026-06-30 18:02:06.811250346 +0000 UTC m=+415.041555482 I0630 18:02:06.972620 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:06.97260518 +0000 UTC m=+415.202910316 I0630 18:02:07.023504 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:07.023484134 +0000 UTC m=+415.253789310 I0630 18:02:07.083903 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:07.083886681 +0000 UTC m=+415.314191807 I0630 18:02:07.228844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:07.322726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:07.423708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:07.424132 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:07.424125169 +0000 UTC m=+415.654430315 I0630 18:02:07.821177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:16.939372 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" condition "Ready" to 2026-06-30 18:02:16.939341593 +0000 UTC m=+425.169646739 I0630 18:02:16.940234 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:16.940319 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" condition "Issuing" to 2026-06-30 18:02:16.940302867 +0000 UTC m=+425.170608043 I0630 18:02:16.961703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:16.961775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:16.961799 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" condition "Issuing" to 2026-06-30 18:02:16.961790974 +0000 UTC m=+425.192096120 I0630 18:02:17.261460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:17.278943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wmtrz-9qfvd" condition "Approved" to 2026-06-30 18:02:17.278932957 +0000 UTC m=+425.509238093 I0630 18:02:17.306662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wmtrz-9qfvd" condition "Ready" to 2026-06-30 18:02:17.306648308 +0000 UTC m=+425.536953444 I0630 18:02:17.354241 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:17.354227245 +0000 UTC m=+425.584532391 I0630 18:02:17.377668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:17.378046 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:17.378034734 +0000 UTC m=+425.608339910 I0630 18:02:17.425353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wmtrz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:28.425360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:28.425417 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-30 18:02:28.425402322 +0000 UTC m=+436.655707498 I0630 18:02:28.425471 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-30 18:02:28.425449704 +0000 UTC m=+436.655754830 I0630 18:02:28.445731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:28.445887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:28.445912 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-30 18:02:28.445905234 +0000 UTC m=+436.676210380 I0630 18:02:28.778377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-q7snv" condition "Approved" to 2026-06-30 18:02:28.778365574 +0000 UTC m=+437.008670720 I0630 18:02:28.799165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-q7snv" condition "Ready" to 2026-06-30 18:02:28.799148823 +0000 UTC m=+437.029453989 I0630 18:02:28.830444 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:28.830424395 +0000 UTC m=+437.060729541 I0630 18:02:28.851022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:05:45.789909 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-30 18:05:45.789857051 +0000 UTC m=+634.020162227 I0630 18:05:45.790630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:05:45.790661 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-30 18:05:45.790655018 +0000 UTC m=+634.020960184 I0630 18:05:45.807188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:05:45.807276 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:05:45.807295 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-30 18:05:45.807290379 +0000 UTC m=+634.037595515 I0630 18:05:46.110859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:05:46.122217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jrfst" condition "Approved" to 2026-06-30 18:05:46.122201271 +0000 UTC m=+634.352506447 I0630 18:05:46.143181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jrfst" condition "Ready" to 2026-06-30 18:05:46.143171942 +0000 UTC m=+634.373477088 I0630 18:05:46.174401 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:05:46.174385913 +0000 UTC m=+634.404691049 I0630 18:05:46.197533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:06:23.009866 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-30 18:06:23.009376919 +0000 UTC m=+671.239682065 I0630 18:06:23.010278 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:06:23.010302 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-30 18:06:23.010298441 +0000 UTC m=+671.240603587 I0630 18:06:23.027302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:06:23.027373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:06:23.027394 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-30 18:06:23.027387528 +0000 UTC m=+671.257692694 I0630 18:06:23.176129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:06:23.187679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kb9bm" condition "Approved" to 2026-06-30 18:06:23.187666626 +0000 UTC m=+671.417971762 I0630 18:06:23.211289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kb9bm" condition "Ready" to 2026-06-30 18:06:23.211281603 +0000 UTC m=+671.441586739 I0630 18:06:23.249740 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:06:23.249723348 +0000 UTC m=+671.480028484 I0630 18:06:23.281723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:06:23.353870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"