I0624 17:08:59.940934 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0624 17:08:59.941026 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0624 17:08:59.941251 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0624 17:08:59.944411 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0624 17:08:59.944945 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0624 17:08:59.945016 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0624 17:08:59.945078 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0624 17:08:59.948308 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0624 17:08:59.961882 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0624 17:08:59.969877 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0624 17:08:59.973959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0624 17:08:59.977545 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0624 17:08:59.977596 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0624 17:08:59.980328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0624 17:08:59.982116 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0624 17:08:59.986776 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0624 17:08:59.991021 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0624 17:08:59.994803 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0624 17:08:59.996833 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0624 17:08:59.998694 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0624 17:09:00.000438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0624 17:09:00.002209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0624 17:09:00.004089 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0624 17:09:00.010309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0624 17:09:00.014217 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0624 17:09:00.014258 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0624 17:09:00.014274 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0624 17:09:00.014289 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0624 17:09:00.014307 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0624 17:09:00.014314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0624 17:09:00.017125 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0624 17:09:00.019532 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0624 17:09:00.022204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0624 17:09:00.024780 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:00.025591 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:00.026740 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:00.049700 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:00.062259 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:00.078652 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:00.092462 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:00.108963 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:00.119367 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:00.125005 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 17:09:15.745531 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-24 17:09:15.745516427 +0000 UTC m=+15.836072890 I0624 17:09:16.517122 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-24 17:09:16.517111179 +0000 UTC m=+16.607667652 I0624 17:09:16.517223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:09:16.517271 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 17:09:16.517264062 +0000 UTC m=+16.607820525 I0624 17:09:16.528737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:09:16.528814 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:09:16.528958 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 17:09:16.528949937 +0000 UTC m=+16.619506420 E0624 17:09:16.532188 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 17:09:16.532244 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-24 17:09:16.532239595 +0000 UTC m=+16.622796058 E0624 17:09:16.532261 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:09:16.547156 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0624 17:09:16.547875 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:09:16.547951 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:09:16.548066 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0624 17:09:16.571426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bk6b5" condition "Approved" to 2026-06-24 17:09:16.571405075 +0000 UTC m=+16.661961548 I0624 17:09:16.586103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bk6b5" condition "Ready" to 2026-06-24 17:09:16.586091382 +0000 UTC m=+16.676647865 I0624 17:09:16.610372 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:09:16.61035971 +0000 UTC m=+16.700916183 I0624 17:09:16.630009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:09:16.630810 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:09:16.630802817 +0000 UTC m=+16.721359290 I0624 17:09:16.649875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:09:21.548238 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:09:21.548216921 +0000 UTC m=+21.638773424 I0624 17:09:46.223404 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 17:09:46.223360731 +0000 UTC m=+46.313917234 I0624 17:09:46.223466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:09:46.223543 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 17:09:46.223532354 +0000 UTC m=+46.314088857 I0624 17:09:46.258543 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-24 17:09:46.258525307 +0000 UTC m=+46.349081800 I0624 17:09:46.262801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:09:46.263020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:09:46.263208 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 17:09:46.263065056 +0000 UTC m=+46.353621569 I0624 17:09:46.838084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vkhpn" condition "Approved" to 2026-06-24 17:09:46.838069547 +0000 UTC m=+46.928626040 I0624 17:09:46.899742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vkhpn" condition "Ready" to 2026-06-24 17:09:46.89973201 +0000 UTC m=+46.990288463 I0624 17:09:46.940119 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:09:46.940102886 +0000 UTC m=+47.030659359 I0624 17:09:46.973531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:14:09.394348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-81.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:14:09.394421 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-81.nip.io-tls" condition "Issuing" to 2026-06-24 17:14:09.394409804 +0000 UTC m=+309.484966307 I0624 17:14:09.395300 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-81.nip.io-tls" condition "Ready" to 2026-06-24 17:14:09.395289364 +0000 UTC m=+309.485845877 I0624 17:14:09.414436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-81.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-81.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:14:09.414523 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-81.nip.io-tls" condition "Ready" to 2026-06-24 17:14:09.414516129 +0000 UTC m=+309.505072602 I0624 17:14:09.556611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-81.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-81.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:14:09.594187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-81.nip.io-tls-pgxjk" condition "Approved" to 2026-06-24 17:14:09.59417144 +0000 UTC m=+309.684727903 I0624 17:14:09.632603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-81.nip.io-tls-pgxjk" condition "Ready" to 2026-06-24 17:14:09.63258886 +0000 UTC m=+309.723145333 I0624 17:14:09.667006 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-81.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:14:09.6669913 +0000 UTC m=+309.757547773 I0624 17:14:09.686649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-81.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-81.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:14:09.687578 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-81.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:14:09.687567815 +0000 UTC m=+309.778124288 I0624 17:14:09.712381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-81.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-81.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:15:14.293031 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-24 17:15:14.292971794 +0000 UTC m=+374.383528297 I0624 17:15:14.294004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:15:14.294044 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 17:15:14.294034743 +0000 UTC m=+374.384591256 I0624 17:15:14.315201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0624 17:15:14.315229 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 17:15:14.315334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:15:14.315481 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 17:15:14.315468726 +0000 UTC m=+374.406025189 I0624 17:15:14.315420 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-24 17:15:14.315391544 +0000 UTC m=+374.405948017 E0624 17:15:14.315820 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:15:14.331130 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0624 17:15:14.331353 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:15:14.331551 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 17:15:14.331640 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0624 17:15:14.350287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rwtwn" condition "Approved" to 2026-06-24 17:15:14.350274889 +0000 UTC m=+374.440831362 I0624 17:15:14.361685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rwtwn" condition "Ready" to 2026-06-24 17:15:14.361672393 +0000 UTC m=+374.452228866 I0624 17:15:14.387606 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:15:14.38759292 +0000 UTC m=+374.478149393 I0624 17:15:14.408504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:15:14.408849 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:15:14.408840728 +0000 UTC m=+374.499397201 I0624 17:15:14.424262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:15:19.332629 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:15:19.332614758 +0000 UTC m=+379.423171251 I0624 17:16:00.640515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:16:00.640543 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 17:16:00.640536054 +0000 UTC m=+420.731092537 I0624 17:16:00.641511 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 17:16:00.641504441 +0000 UTC m=+420.732060924 I0624 17:16:00.642525 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:16:00.642572 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 17:16:00.642566349 +0000 UTC m=+420.733122812 I0624 17:16:00.642846 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 17:16:00.642828874 +0000 UTC m=+420.733385347 I0624 17:16:00.657634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:16:00.657665 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 17:16:00.657659459 +0000 UTC m=+420.748215922 I0624 17:16:00.658539 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 17:16:00.658532924 +0000 UTC m=+420.749089407 I0624 17:16:00.687397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:00.687462 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 17:16:00.687455733 +0000 UTC m=+420.778012206 I0624 17:16:00.692719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:00.692775 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 17:16:00.692769905 +0000 UTC m=+420.783326368 I0624 17:16:00.709215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:00.709282 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 17:16:00.70927649 +0000 UTC m=+420.799832953 I0624 17:16:00.907943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:00.972647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cjlqh" condition "Approved" to 2026-06-24 17:16:00.972637143 +0000 UTC m=+421.063193616 I0624 17:16:00.976338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:00.976864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:01.022580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cjlqh" condition "Ready" to 2026-06-24 17:16:01.022571314 +0000 UTC m=+421.113127777 I0624 17:16:01.048420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mffhg" condition "Approved" to 2026-06-24 17:16:01.048410719 +0000 UTC m=+421.138967182 I0624 17:16:01.054962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bmn4g" condition "Approved" to 2026-06-24 17:16:01.054953302 +0000 UTC m=+421.145509765 I0624 17:16:01.067649 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:01.06763696 +0000 UTC m=+421.158193423 I0624 17:16:01.071071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mffhg" condition "Ready" to 2026-06-24 17:16:01.07106383 +0000 UTC m=+421.161620293 I0624 17:16:01.073322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bmn4g" condition "Ready" to 2026-06-24 17:16:01.073317678 +0000 UTC m=+421.163874141 I0624 17:16:01.124784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:01.125093 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:01.12508608 +0000 UTC m=+421.215642543 I0624 17:16:01.631655 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:01.631641945 +0000 UTC m=+421.722198418 I0624 17:16:01.728633 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:01.728616874 +0000 UTC m=+421.819173347 I0624 17:16:01.787045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:01.827095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:01.926891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:01.927473 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:01.927466079 +0000 UTC m=+422.018022542 I0624 17:16:02.039098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:02.039423 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:02.039416477 +0000 UTC m=+422.129972940 I0624 17:16:02.395232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:02.533256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:11.229363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:16:11.229397 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls" condition "Issuing" to 2026-06-24 17:16:11.22938973 +0000 UTC m=+431.319946203 I0624 17:16:11.229949 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls" condition "Ready" to 2026-06-24 17:16:11.229942349 +0000 UTC m=+431.320498822 I0624 17:16:11.243712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:11.243874 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls" condition "Ready" to 2026-06-24 17:16:11.243843415 +0000 UTC m=+431.334399898 I0624 17:16:11.803712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:11.898398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tk9qz-v6tn8" condition "Approved" to 2026-06-24 17:16:11.898387387 +0000 UTC m=+431.988943850 I0624 17:16:11.993630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tk9qz-v6tn8" condition "Ready" to 2026-06-24 17:16:11.993621423 +0000 UTC m=+432.084177886 I0624 17:16:12.096049 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:12.096033238 +0000 UTC m=+432.186589711 I0624 17:16:12.178627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:12.179154 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:12.179143805 +0000 UTC m=+432.269700288 I0624 17:16:12.393145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tk9qz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:35.503935 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-24 17:16:35.503896339 +0000 UTC m=+455.594452812 I0624 17:16:35.504170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:16:35.504279 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 17:16:35.504267166 +0000 UTC m=+455.594823669 I0624 17:16:35.519952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:16:35.520037 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:16:35.520064 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 17:16:35.520059795 +0000 UTC m=+455.610616258 I0624 17:16:35.776066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8p7js" condition "Approved" to 2026-06-24 17:16:35.776056596 +0000 UTC m=+455.866613069 I0624 17:16:35.797011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8p7js" condition "Ready" to 2026-06-24 17:16:35.7970015 +0000 UTC m=+455.887557963 I0624 17:16:35.829383 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:16:35.829368781 +0000 UTC m=+455.919925254 I0624 17:16:35.846911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:19:54.432088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:19:54.432138 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 17:19:54.432132486 +0000 UTC m=+654.522688959 I0624 17:19:54.432171 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 17:19:54.432153876 +0000 UTC m=+654.522710349 I0624 17:19:54.453877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:19:54.453959 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 17:19:54.453952718 +0000 UTC m=+654.544509181 I0624 17:19:55.079809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:19:55.119385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lc2rc" condition "Approved" to 2026-06-24 17:19:55.119371381 +0000 UTC m=+655.209927884 I0624 17:19:55.142633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lc2rc" condition "Ready" to 2026-06-24 17:19:55.142621703 +0000 UTC m=+655.233178176 I0624 17:19:55.181604 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:19:55.181587561 +0000 UTC m=+655.272144034 I0624 17:19:55.209491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:20:33.642544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 17:20:33.642593 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 17:20:33.642582499 +0000 UTC m=+693.733138992 I0624 17:20:33.643014 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-24 17:20:33.642999055 +0000 UTC m=+693.733555528 I0624 17:20:33.663576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:20:33.663769 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-24 17:20:33.663761359 +0000 UTC m=+693.754317822 I0624 17:20:33.750945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:20:33.792485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zlr89" condition "Approved" to 2026-06-24 17:20:33.792473481 +0000 UTC m=+693.883029944 I0624 17:20:33.810190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zlr89" condition "Ready" to 2026-06-24 17:20:33.810179272 +0000 UTC m=+693.900735735 I0624 17:20:33.844783 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:20:33.844768412 +0000 UTC m=+693.935324885 I0624 17:20:33.862661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:20:33.863102 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:20:33.863096351 +0000 UTC m=+693.953652814 I0624 17:20:33.882026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 17:20:33.882376 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 17:20:33.882369775 +0000 UTC m=+693.972926238