I0615 11:43:34.346194 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0615 11:43:34.346347 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0615 11:43:34.346606 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0615 11:43:34.351581 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0615 11:43:34.352193 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0615 11:43:34.352250 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0615 11:43:34.352272 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0615 11:43:34.355216 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0615 11:43:34.370517 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0615 11:43:34.370723 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0615 11:43:34.377487 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0615 11:43:34.381276 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0615 11:43:34.385597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0615 11:43:34.388429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0615 11:43:34.391050 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0615 11:43:34.394237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0615 11:43:34.397710 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0615 11:43:34.397776 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0615 11:43:34.397783 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0615 11:43:34.401218 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0615 11:43:34.406770 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0615 11:43:34.409730 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0615 11:43:34.412460 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0615 11:43:34.415333 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0615 11:43:34.417813 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0615 11:43:34.417851 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0615 11:43:34.419846 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0615 11:43:34.421747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0615 11:43:34.423669 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0615 11:43:34.428308 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0615 11:43:34.431063 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0615 11:43:34.431126 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0615 11:43:34.431190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0615 11:43:34.434947 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:43:34.435475 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:43:34.435651 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:43:34.455926 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:43:34.470173 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:43:34.485028 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:43:34.499686 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:43:34.518612 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:43:34.521724 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:43:34.533997 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:43:47.477469 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-15 11:43:47.477451729 +0000 UTC m=+13.164612591 I0615 11:43:48.244419 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:43:48.244502 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 11:43:48.244489159 +0000 UTC m=+13.931650071 I0615 11:43:48.244817 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-15 11:43:48.244764129 +0000 UTC m=+13.931925021 E0615 11:43:48.259789 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 11:43:48.259898 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-15 11:43:48.259887362 +0000 UTC m=+13.947048234 E0615 11:43:48.260014 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 11:43:48.264917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:43:48.264994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:43:48.265018 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 11:43:48.265010873 +0000 UTC m=+13.952171735 E0615 11:43:48.271503 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0615 11:43:48.271660 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 11:43:48.271707 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 11:43:48.271748 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0615 11:43:48.299103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w9kbj" condition "Approved" to 2026-06-15 11:43:48.299092454 +0000 UTC m=+13.986253316 I0615 11:43:48.309507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w9kbj" condition "Ready" to 2026-06-15 11:43:48.309496131 +0000 UTC m=+13.996656993 I0615 11:43:48.330530 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:43:48.330516002 +0000 UTC m=+14.017676874 I0615 11:43:48.347133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:43:48.348467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:43:48.348593 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:43:48.348582919 +0000 UTC m=+14.035743801 I0615 11:43:48.359094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:43:53.272511 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:43:53.272493524 +0000 UTC m=+18.959654416 I0615 11:44:16.210082 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-15 11:44:16.210018337 +0000 UTC m=+41.897179199 I0615 11:44:16.210166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:44:16.210204 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 11:44:16.210196022 +0000 UTC m=+41.897356884 I0615 11:44:16.224285 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-15 11:44:16.224273312 +0000 UTC m=+41.911434184 I0615 11:44:16.248282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:44:16.248344 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-15 11:44:16.248336474 +0000 UTC m=+41.935497336 I0615 11:44:16.557865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:44:16.731227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6854r" condition "Approved" to 2026-06-15 11:44:16.731206833 +0000 UTC m=+42.418367735 I0615 11:44:16.853098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6854r" condition "Ready" to 2026-06-15 11:44:16.853080108 +0000 UTC m=+42.540240970 I0615 11:44:16.903579 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:44:16.903561926 +0000 UTC m=+42.590722788 I0615 11:44:16.933776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:44:16.934268 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:44:16.934258603 +0000 UTC m=+42.621419475 I0615 11:44:16.948428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:44:16.964299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:48:22.485151 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-06-15 11:48:22.485111277 +0000 UTC m=+288.172272129 I0615 11:48:22.485549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:48:22.485568 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-06-15 11:48:22.485564321 +0000 UTC m=+288.172725173 I0615 11:48:22.506564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:48:22.506616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:48:22.506631 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-06-15 11:48:22.506625299 +0000 UTC m=+288.193786151 I0615 11:48:22.768206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:48:22.772851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-kgmc5" condition "Approved" to 2026-06-15 11:48:22.772841669 +0000 UTC m=+288.460002561 I0615 11:48:22.805675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-kgmc5" condition "Ready" to 2026-06-15 11:48:22.805663785 +0000 UTC m=+288.492824667 I0615 11:48:22.835267 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:48:22.835254692 +0000 UTC m=+288.522415544 I0615 11:48:22.858621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:49:27.250709 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:49:27.250715 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 11:49:27.250667532 +0000 UTC m=+352.937828394 I0615 11:49:27.250752 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-15 11:49:27.250741043 +0000 UTC m=+352.937901925 E0615 11:49:27.330951 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 11:49:27.331003 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-15 11:49:27.33099219 +0000 UTC m=+353.018153082 E0615 11:49:27.331102 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 11:49:27.334607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:49:27.334675 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 11:49:27.334667506 +0000 UTC m=+353.021828368 E0615 11:49:27.356625 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0615 11:49:27.356835 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 11:49:27.356861 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 11:49:27.356926 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0615 11:49:27.360064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:49:27.360138 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 11:49:27.360127945 +0000 UTC m=+353.047288807 I0615 11:49:27.364102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:49:27.367627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2xf8s" condition "Approved" to 2026-06-15 11:49:27.367619301 +0000 UTC m=+353.054780153 I0615 11:49:27.374084 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 11:49:27.374075103 +0000 UTC m=+353.061235945 I0615 11:49:27.377576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2xf8s" condition "Ready" to 2026-06-15 11:49:27.377567135 +0000 UTC m=+353.064727977 I0615 11:49:27.380370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:49:27.392724 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:49:27.392712721 +0000 UTC m=+353.079873583 I0615 11:49:27.427224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:49:27.443327 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:49:27.44331901 +0000 UTC m=+353.130479862 I0615 11:49:27.471842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:49:27.472148 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:49:27.472140428 +0000 UTC m=+353.159301280 I0615 11:49:32.357236 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:49:32.357221948 +0000 UTC m=+358.044382830 I0615 11:50:13.427287 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-15 11:50:13.427245292 +0000 UTC m=+399.114406134 I0615 11:50:13.427587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:50:13.427610 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-15 11:50:13.427607269 +0000 UTC m=+399.114768111 I0615 11:50:13.454689 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-15 11:50:13.454672292 +0000 UTC m=+399.141833154 I0615 11:50:13.455129 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-15 11:50:13.455124371 +0000 UTC m=+399.142285233 I0615 11:50:13.455344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:50:13.455369 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-15 11:50:13.455364866 +0000 UTC m=+399.142525728 I0615 11:50:13.454776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:50:13.458697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:13.458806 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-15 11:50:13.458799096 +0000 UTC m=+399.145959948 I0615 11:50:13.458638 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-15 11:50:13.458619002 +0000 UTC m=+399.145779874 I0615 11:50:13.480873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:13.480924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:50:13.480939 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-15 11:50:13.480933938 +0000 UTC m=+399.168094790 I0615 11:50:13.482777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:13.482850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:50:13.482881 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-15 11:50:13.482873337 +0000 UTC m=+399.170034199 I0615 11:50:13.598506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lvktw" condition "Approved" to 2026-06-15 11:50:13.598465446 +0000 UTC m=+399.285626298 I0615 11:50:13.607433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9ptv8" condition "Approved" to 2026-06-15 11:50:13.607418539 +0000 UTC m=+399.294579401 I0615 11:50:13.622373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lvktw" condition "Ready" to 2026-06-15 11:50:13.622358094 +0000 UTC m=+399.309518946 I0615 11:50:13.624545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9ptv8" condition "Ready" to 2026-06-15 11:50:13.624538878 +0000 UTC m=+399.311699740 I0615 11:50:13.654126 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:50:13.654109052 +0000 UTC m=+399.341269934 I0615 11:50:13.671360 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:50:13.671341753 +0000 UTC m=+399.358502605 I0615 11:50:13.695299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:13.696110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:14.065204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:14.264505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:14.321136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-76nxd" condition "Approved" to 2026-06-15 11:50:14.32088711 +0000 UTC m=+400.008048002 I0615 11:50:14.705090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-76nxd" condition "Ready" to 2026-06-15 11:50:14.705079599 +0000 UTC m=+400.392240461 I0615 11:50:14.870570 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:50:14.870553156 +0000 UTC m=+400.557714018 I0615 11:50:14.972232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:14.972704 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:50:14.972695775 +0000 UTC m=+400.659856637 I0615 11:50:15.215360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:15.263911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:21.723129 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" condition "Ready" to 2026-06-15 11:50:21.723090577 +0000 UTC m=+407.410251469 I0615 11:50:21.723317 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:50:21.723352 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" condition "Issuing" to 2026-06-15 11:50:21.723344393 +0000 UTC m=+407.410505255 I0615 11:50:21.740344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:21.740434 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" condition "Ready" to 2026-06-15 11:50:21.740426344 +0000 UTC m=+407.427587206 I0615 11:50:21.847518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:21.876632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4zrrk-jrxjs" condition "Approved" to 2026-06-15 11:50:21.876620454 +0000 UTC m=+407.563781296 I0615 11:50:21.894982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4zrrk-jrxjs" condition "Ready" to 2026-06-15 11:50:21.89497043 +0000 UTC m=+407.582131292 I0615 11:50:21.928085 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:50:21.928068351 +0000 UTC m=+407.615229233 I0615 11:50:21.947338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:21.947506 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:50:21.94750098 +0000 UTC m=+407.634661832 I0615 11:50:21.969626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:21.974580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zrrk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:35.258244 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-15 11:50:35.258203362 +0000 UTC m=+420.945364204 I0615 11:50:35.258543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:50:35.258597 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-15 11:50:35.25858787 +0000 UTC m=+420.945748732 I0615 11:50:35.281404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:35.281598 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-15 11:50:35.281590743 +0000 UTC m=+420.968751605 I0615 11:50:35.518763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:35.546876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8rffz" condition "Approved" to 2026-06-15 11:50:35.546836206 +0000 UTC m=+421.233997068 I0615 11:50:35.563004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8rffz" condition "Ready" to 2026-06-15 11:50:35.562993347 +0000 UTC m=+421.250154209 I0615 11:50:35.587243 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:50:35.587230684 +0000 UTC m=+421.274391536 I0615 11:50:35.604012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:52.430439 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-15 11:53:52.430421403 +0000 UTC m=+618.117582295 I0615 11:53:52.430875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:53:52.430917 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-15 11:53:52.43090794 +0000 UTC m=+618.118068832 I0615 11:53:52.449576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:52.449886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:53:52.449919 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-15 11:53:52.449910146 +0000 UTC m=+618.137071008 I0615 11:53:52.744738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9qn4b" condition "Approved" to 2026-06-15 11:53:52.744725046 +0000 UTC m=+618.431885888 I0615 11:53:52.765473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9qn4b" condition "Ready" to 2026-06-15 11:53:52.765463078 +0000 UTC m=+618.452623940 I0615 11:53:52.807216 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:53:52.807196655 +0000 UTC m=+618.494357537 I0615 11:53:52.840604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:52.840898 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:53:52.840892235 +0000 UTC m=+618.528053087 I0615 11:53:52.850631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:52.864342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:54:37.669664 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-15 11:54:37.669648757 +0000 UTC m=+663.356809619 I0615 11:54:37.669854 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:54:37.669894 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 11:54:37.66989056 +0000 UTC m=+663.357051422 I0615 11:54:37.688053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:54:37.688289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:54:37.688391 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-15 11:54:37.688382962 +0000 UTC m=+663.375543814 I0615 11:54:37.855311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:54:37.860654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wrd4v" condition "Approved" to 2026-06-15 11:54:37.860638893 +0000 UTC m=+663.547799755 I0615 11:54:37.884277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wrd4v" condition "Ready" to 2026-06-15 11:54:37.884267497 +0000 UTC m=+663.571428349 I0615 11:54:37.913313 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:54:37.913298399 +0000 UTC m=+663.600459251 I0615 11:54:37.931557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"