I0628 19:52:26.694409 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0628 19:52:26.694559 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0628 19:52:26.694659 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0628 19:52:26.699597 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0628 19:52:26.700401 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0628 19:52:26.700495 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0628 19:52:26.700530 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0628 19:52:26.703555 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0628 19:52:26.717261 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0628 19:52:26.717499 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0628 19:52:26.725686 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0628 19:52:26.729103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0628 19:52:26.732472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0628 19:52:26.734985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0628 19:52:26.737579 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0628 19:52:26.740141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0628 19:52:26.742793 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0628 19:52:26.747077 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0628 19:52:26.753445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0628 19:52:26.759777 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0628 19:52:26.759858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0628 19:52:26.762395 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0628 19:52:26.766970 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0628 19:52:26.767059 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0628 19:52:26.771566 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0628 19:52:26.775024 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0628 19:52:26.776796 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0628 19:52:26.776956 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0628 19:52:26.778641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0628 19:52:26.781959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0628 19:52:26.786322 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0628 19:52:26.786364 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0628 19:52:26.786383 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0628 19:52:26.789519 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:52:26.789555 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:52:26.790073 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:52:26.790401 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:52:26.822768 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:52:26.832918 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:52:26.841632 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:52:26.854928 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:52:26.870181 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:52:26.877689 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:52:38.097999 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-28 19:52:38.097977758 +0000 UTC m=+11.434057681 I0628 19:52:38.777123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:52:38.777188 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-28 19:52:38.777176975 +0000 UTC m=+12.113256898 I0628 19:52:38.778594 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-28 19:52:38.778562966 +0000 UTC m=+12.114642889 E0628 19:52:38.792094 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 19:52:38.792161 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-28 19:52:38.792154452 +0000 UTC m=+12.128234355 E0628 19:52:38.792184 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 19:52:38.796769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:52:38.796880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:52:38.796902 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-28 19:52:38.796894628 +0000 UTC m=+12.132974541 E0628 19:52:38.807399 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0628 19:52:38.807694 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:52:38.807735 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:52:38.807772 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0628 19:52:38.833970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g6hgc" condition "Approved" to 2026-06-28 19:52:38.833955811 +0000 UTC m=+12.170035744 I0628 19:52:38.845350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g6hgc" condition "Ready" to 2026-06-28 19:52:38.845339636 +0000 UTC m=+12.181419539 I0628 19:52:38.865473 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:52:38.865459038 +0000 UTC m=+12.201538941 I0628 19:52:38.882764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:52:38.917381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:52:43.808239 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:52:43.808225253 +0000 UTC m=+17.144305176 I0628 19:53:11.497131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:53:11.497179 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-28 19:53:11.497161926 +0000 UTC m=+44.833241859 I0628 19:53:11.497723 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-28 19:53:11.497713655 +0000 UTC m=+44.833793588 I0628 19:53:11.510806 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-28 19:53:11.510796297 +0000 UTC m=+44.846876200 I0628 19:53:11.522654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:53:11.522885 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-28 19:53:11.522876561 +0000 UTC m=+44.858956464 I0628 19:53:11.629203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:53:11.661168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xs2mj" condition "Approved" to 2026-06-28 19:53:11.661159031 +0000 UTC m=+44.997238934 I0628 19:53:11.693444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xs2mj" condition "Ready" to 2026-06-28 19:53:11.693432453 +0000 UTC m=+45.029512356 I0628 19:53:11.723294 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:53:11.723284392 +0000 UTC m=+45.059364295 I0628 19:53:11.746127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:17.917530 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready" to 2026-06-28 19:57:17.917508229 +0000 UTC m=+291.253588132 I0628 19:57:17.917816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:17.917848 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-06-28 19:57:17.91784044 +0000 UTC m=+291.253920353 I0628 19:57:17.935800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:17.935845 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready" to 2026-06-28 19:57:17.935839927 +0000 UTC m=+291.271919820 I0628 19:57:18.017448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:18.043238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-7pbfd" condition "Approved" to 2026-06-28 19:57:18.043224345 +0000 UTC m=+291.379304268 I0628 19:57:18.068628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-7pbfd" condition "Ready" to 2026-06-28 19:57:18.068615274 +0000 UTC m=+291.404695207 I0628 19:57:18.093684 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:18.093673221 +0000 UTC m=+291.429753124 I0628 19:57:18.181258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:18.228056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:21.398975 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-28 19:58:21.398906587 +0000 UTC m=+354.734986530 I0628 19:58:21.399729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:58:21.399846 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-28 19:58:21.399836891 +0000 UTC m=+354.735916824 I0628 19:58:21.412680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:21.412830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:58:21.412860 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-28 19:58:21.412851218 +0000 UTC m=+354.748931141 E0628 19:58:21.414745 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 19:58:21.414852 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-28 19:58:21.414843439 +0000 UTC m=+354.750923342 E0628 19:58:21.414921 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:58:21.428071 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0628 19:58:21.428155 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:58:21.428176 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:58:21.428198 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0628 19:58:21.454063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-srs2s" condition "Approved" to 2026-06-28 19:58:21.454048285 +0000 UTC m=+354.790128208 I0628 19:58:21.466440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-srs2s" condition "Ready" to 2026-06-28 19:58:21.466427876 +0000 UTC m=+354.802507779 I0628 19:58:21.494466 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:58:21.494455801 +0000 UTC m=+354.830535704 I0628 19:58:21.513909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:21.514139 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:58:21.514132011 +0000 UTC m=+354.850211904 I0628 19:58:21.530741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:26.429461 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:58:26.429447944 +0000 UTC m=+359.765527867 I0628 19:59:07.952476 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-28 19:59:07.952439465 +0000 UTC m=+401.288519368 I0628 19:59:07.954929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:59:07.954966 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-28 19:59:07.954958862 +0000 UTC m=+401.291038765 I0628 19:59:07.954939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:59:07.955204 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-28 19:59:07.955195587 +0000 UTC m=+401.291275510 I0628 19:59:07.955421 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-28 19:59:07.955413262 +0000 UTC m=+401.291493165 I0628 19:59:07.968545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:59:07.968569 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-28 19:59:07.968564598 +0000 UTC m=+401.304644501 I0628 19:59:07.968650 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-28 19:59:07.96863496 +0000 UTC m=+401.304714853 I0628 19:59:07.990793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:07.990846 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-28 19:59:07.99084009 +0000 UTC m=+401.326919983 I0628 19:59:08.004730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:08.004800 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-28 19:59:08.004792984 +0000 UTC m=+401.340872907 I0628 19:59:08.021388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:08.021461 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-28 19:59:08.021454139 +0000 UTC m=+401.357534032 I0628 19:59:08.177082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:08.209820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ps5bq" condition "Approved" to 2026-06-28 19:59:08.2098066 +0000 UTC m=+401.545886503 I0628 19:59:08.230862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:08.231365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ps5bq" condition "Ready" to 2026-06-28 19:59:08.231357304 +0000 UTC m=+401.567437197 I0628 19:59:08.256954 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:59:08.256942168 +0000 UTC m=+401.593022061 I0628 19:59:08.273103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4cn7b" condition "Approved" to 2026-06-28 19:59:08.273092921 +0000 UTC m=+401.609172814 I0628 19:59:08.289144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:08.294012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:08.296234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4cn7b" condition "Ready" to 2026-06-28 19:59:08.296219471 +0000 UTC m=+401.632299364 I0628 19:59:08.443986 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:59:08.44397166 +0000 UTC m=+401.780051563 I0628 19:59:08.499903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8lmfz" condition "Approved" to 2026-06-28 19:59:08.499887936 +0000 UTC m=+401.835967829 I0628 19:59:08.644545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:08.645280 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:59:08.645268211 +0000 UTC m=+401.981348144 I0628 19:59:08.704202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8lmfz" condition "Ready" to 2026-06-28 19:59:08.704193055 +0000 UTC m=+402.040272938 I0628 19:59:09.046128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:09.398118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:09.447606 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:59:09.447586807 +0000 UTC m=+402.783666730 I0628 19:59:09.599999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:09.600334 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:59:09.600328329 +0000 UTC m=+402.936408222 I0628 19:59:09.797043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:21.943047 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-996c4-tls" condition "Ready" to 2026-06-28 19:59:21.942994117 +0000 UTC m=+415.279074050 I0628 19:59:21.943042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-996c4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:59:21.943273 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-996c4-tls" condition "Issuing" to 2026-06-28 19:59:21.943261773 +0000 UTC m=+415.279341696 I0628 19:59:21.957861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-996c4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-996c4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:21.957919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-996c4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:59:21.957935 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-996c4-tls" condition "Issuing" to 2026-06-28 19:59:21.957929481 +0000 UTC m=+415.294009374 I0628 19:59:22.255609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-996c4-lv2sg" condition "Approved" to 2026-06-28 19:59:22.255595441 +0000 UTC m=+415.591675344 I0628 19:59:22.284341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-996c4-lv2sg" condition "Ready" to 2026-06-28 19:59:22.284330164 +0000 UTC m=+415.620410067 I0628 19:59:22.335365 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-996c4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:59:22.335350079 +0000 UTC m=+415.671429982 I0628 19:59:22.349833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-996c4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-996c4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:22.350242 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-996c4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:59:22.350234941 +0000 UTC m=+415.686314844 I0628 19:59:22.371720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-996c4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-996c4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:22.373442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-996c4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-996c4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:22.373841 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-996c4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:59:22.373832002 +0000 UTC m=+415.709911895 I0628 19:59:42.159730 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-28 19:59:42.159709596 +0000 UTC m=+435.495789529 I0628 19:59:42.161125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:59:42.161154 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-28 19:59:42.161146055 +0000 UTC m=+435.497225988 I0628 19:59:42.205331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:42.205380 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-28 19:59:42.205374889 +0000 UTC m=+435.541454792 I0628 19:59:42.616343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:42.665111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zt5ns" condition "Approved" to 2026-06-28 19:59:42.665091675 +0000 UTC m=+436.001171598 I0628 19:59:42.772468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zt5ns" condition "Ready" to 2026-06-28 19:59:42.772455903 +0000 UTC m=+436.108535806 I0628 19:59:42.815437 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:59:42.81542609 +0000 UTC m=+436.151505983 I0628 19:59:42.851679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:59:42.906717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:02:51.711878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:02:51.711929 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-28 20:02:51.711921532 +0000 UTC m=+625.048001435 I0628 20:02:51.711890 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-28 20:02:51.711868311 +0000 UTC m=+625.047948244 I0628 20:02:51.726781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:02:51.726826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:02:51.726838 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-28 20:02:51.726834042 +0000 UTC m=+625.062913945 I0628 20:02:52.042505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8kpfj" condition "Approved" to 2026-06-28 20:02:52.042469879 +0000 UTC m=+625.378549782 I0628 20:02:52.062120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8kpfj" condition "Ready" to 2026-06-28 20:02:52.062108915 +0000 UTC m=+625.398188818 I0628 20:02:52.091353 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:02:52.091339245 +0000 UTC m=+625.427419148 I0628 20:02:52.111763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:02:52.112050 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:02:52.112043098 +0000 UTC m=+625.448123001 I0628 20:02:52.123943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:02:52.132268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:03:36.090979 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-28 20:03:36.090965335 +0000 UTC m=+669.427045228 I0628 20:03:36.091944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:03:36.091998 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-28 20:03:36.091993391 +0000 UTC m=+669.428073284 I0628 20:03:36.114440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:03:36.114945 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:03:36.115279 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-28 20:03:36.114973112 +0000 UTC m=+669.451053045 I0628 20:03:36.421412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:03:36.430115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-pjwmg" condition "Approved" to 2026-06-28 20:03:36.430097465 +0000 UTC m=+669.766177368 I0628 20:03:36.454333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-pjwmg" condition "Ready" to 2026-06-28 20:03:36.454322555 +0000 UTC m=+669.790402448 I0628 20:03:36.487246 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:03:36.487229272 +0000 UTC m=+669.823309165 I0628 20:03:36.515338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"