I0628 19:51:07.257894 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0628 19:51:07.258043 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0628 19:51:07.258126 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0628 19:51:07.261546 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0628 19:51:07.262002 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0628 19:51:07.262131 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0628 19:51:07.262141 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0628 19:51:07.264769 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0628 19:51:07.494344 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0628 19:51:07.502000 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0628 19:51:07.504685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0628 19:51:07.507279 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0628 19:51:07.507346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0628 19:51:07.509788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0628 19:51:07.511928 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0628 19:51:07.512052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0628 19:51:07.513837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0628 19:51:07.518692 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0628 19:51:07.523684 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0628 19:51:07.523817 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0628 19:51:07.526649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0628 19:51:07.529370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0628 19:51:07.531843 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0628 19:51:07.531872 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0628 19:51:07.531884 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0628 19:51:07.534570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0628 19:51:07.536531 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0628 19:51:07.538398 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0628 19:51:07.540152 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0628 19:51:07.540309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0628 19:51:07.545327 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0628 19:51:07.548726 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0628 19:51:07.551617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0628 19:51:07.555614 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:51:07.556151 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:51:07.556385 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:51:07.556621 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:51:07.607566 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:51:07.608262 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:51:07.618187 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:51:07.644328 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:51:07.661809 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:51:07.667444 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0628 19:51:20.331069 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-28 19:51:20.331054666 +0000 UTC m=+13.104911441 I0628 19:51:21.019537 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:51:21.019539 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-28 19:51:21.019527916 +0000 UTC m=+13.793384681 I0628 19:51:21.019591 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-28 19:51:21.019586008 +0000 UTC m=+13.793442753 I0628 19:51:21.038979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:51:21.039276 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-28 19:51:21.039265037 +0000 UTC m=+13.813121812 E0628 19:51:21.042844 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 19:51:21.042916 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-28 19:51:21.04290903 +0000 UTC m=+13.816765785 E0628 19:51:21.042944 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 19:51:21.052592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0628 19:51:21.052836 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0628 19:51:21.052998 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:51:21.053111 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:51:21.053229 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0628 19:51:21.074750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r5dfg" condition "Approved" to 2026-06-28 19:51:21.074728824 +0000 UTC m=+13.848585579 I0628 19:51:21.086279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r5dfg" condition "Ready" to 2026-06-28 19:51:21.086267931 +0000 UTC m=+13.860124686 I0628 19:51:21.108397 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:51:21.108387529 +0000 UTC m=+13.882244294 I0628 19:51:21.124175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:51:21.124487 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:51:21.124480516 +0000 UTC m=+13.898337271 I0628 19:51:21.138570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:51:26.053908 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:51:26.053880845 +0000 UTC m=+18.827737620 I0628 19:51:49.454817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:51:49.454894 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-28 19:51:49.454844828 +0000 UTC m=+42.228701613 I0628 19:51:49.454910 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-28 19:51:49.45489981 +0000 UTC m=+42.228756595 I0628 19:51:49.466180 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-28 19:51:49.466168015 +0000 UTC m=+42.240024760 I0628 19:51:49.485540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:51:49.485602 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-28 19:51:49.485594381 +0000 UTC m=+42.259451116 I0628 19:51:49.651703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:51:49.684045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k67dj" condition "Approved" to 2026-06-28 19:51:49.684027581 +0000 UTC m=+42.457884346 I0628 19:51:49.726785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k67dj" condition "Ready" to 2026-06-28 19:51:49.726773767 +0000 UTC m=+42.500630532 I0628 19:51:49.752080 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:51:49.752069536 +0000 UTC m=+42.525926301 I0628 19:51:49.775518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:07.601391 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready" to 2026-06-28 19:56:07.601361759 +0000 UTC m=+300.375218544 I0628 19:56:07.602277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:56:07.602307 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-06-28 19:56:07.602300013 +0000 UTC m=+300.376156788 I0628 19:56:07.620738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:07.620774 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready" to 2026-06-28 19:56:07.620770426 +0000 UTC m=+300.394627171 I0628 19:56:07.750017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:07.780882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-2mkb4" condition "Approved" to 2026-06-28 19:56:07.780872031 +0000 UTC m=+300.554728776 I0628 19:56:07.820209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-2mkb4" condition "Ready" to 2026-06-28 19:56:07.820194234 +0000 UTC m=+300.594051019 I0628 19:56:07.847394 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:56:07.847381695 +0000 UTC m=+300.621238450 I0628 19:56:07.870457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:07.870832 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:56:07.87082669 +0000 UTC m=+300.644683445 I0628 19:56:07.884672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:56:07.884973 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:56:07.884967555 +0000 UTC m=+300.658824310 I0628 19:57:10.721594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:10.721630 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-28 19:57:10.721617895 +0000 UTC m=+363.495474650 I0628 19:57:10.722509 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-28 19:57:10.722503982 +0000 UTC m=+363.496360727 I0628 19:57:10.738155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:10.738350 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-28 19:57:10.738343605 +0000 UTC m=+363.512200350 E0628 19:57:10.740269 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0628 19:57:10.740383 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-28 19:57:10.740373116 +0000 UTC m=+363.514229871 E0628 19:57:10.740460 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:57:10.753292 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0628 19:57:10.753379 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:57:10.753405 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0628 19:57:10.753440 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0628 19:57:10.754208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:10.773771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xgvww" condition "Approved" to 2026-06-28 19:57:10.773733623 +0000 UTC m=+363.547590378 I0628 19:57:10.785477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xgvww" condition "Ready" to 2026-06-28 19:57:10.785464691 +0000 UTC m=+363.559321466 I0628 19:57:10.805932 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:10.805920084 +0000 UTC m=+363.579776849 I0628 19:57:10.821687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:15.754997 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:15.754979071 +0000 UTC m=+368.528835846 I0628 19:57:56.014280 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-28 19:57:56.014239377 +0000 UTC m=+408.788096122 I0628 19:57:56.014599 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:56.014682 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-28 19:57:56.014678159 +0000 UTC m=+408.788534904 I0628 19:57:56.015283 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-28 19:57:56.015278895 +0000 UTC m=+408.789135640 I0628 19:57:56.015413 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:56.015454 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-28 19:57:56.01545121 +0000 UTC m=+408.789307945 I0628 19:57:56.028911 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-28 19:57:56.028898192 +0000 UTC m=+408.802754937 I0628 19:57:56.029871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:57:56.029905 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-28 19:57:56.02989814 +0000 UTC m=+408.803754885 I0628 19:57:56.130650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:56.130706 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-28 19:57:56.130701428 +0000 UTC m=+408.904558163 I0628 19:57:56.136575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:56.136660 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-28 19:57:56.136653963 +0000 UTC m=+408.910510708 I0628 19:57:56.136923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:56.136970 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-28 19:57:56.136966831 +0000 UTC m=+408.910823576 I0628 19:57:56.424256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:56.467277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:56.538972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4jbvb" condition "Approved" to 2026-06-28 19:57:56.53895608 +0000 UTC m=+409.312812885 I0628 19:57:56.563966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2sjbk" condition "Approved" to 2026-06-28 19:57:56.563953481 +0000 UTC m=+409.337810236 I0628 19:57:56.593179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4jbvb" condition "Ready" to 2026-06-28 19:57:56.593164129 +0000 UTC m=+409.367020874 I0628 19:57:56.593305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2sjbk" condition "Ready" to 2026-06-28 19:57:56.593291683 +0000 UTC m=+409.367148428 I0628 19:57:56.678983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:56.703433 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:56.703416918 +0000 UTC m=+409.477273703 I0628 19:57:56.712073 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:56.712064318 +0000 UTC m=+409.485921063 I0628 19:57:56.748122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:56.748437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wv8p4" condition "Approved" to 2026-06-28 19:57:56.748429724 +0000 UTC m=+409.522286459 I0628 19:57:56.748501 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:56.748495296 +0000 UTC m=+409.522352051 I0628 19:57:56.751189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:56.772382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wv8p4" condition "Ready" to 2026-06-28 19:57:56.772370736 +0000 UTC m=+409.546227481 I0628 19:57:57.061922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:57.485227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:57.549961 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:57.549946755 +0000 UTC m=+410.323803500 I0628 19:57:57.701465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:57.702158 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:57:57.702146426 +0000 UTC m=+410.476003211 I0628 19:57:58.043562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:58.059748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:57:58.074794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:08.380105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-94wwz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:58:08.380272 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-94wwz-tls" condition "Issuing" to 2026-06-28 19:58:08.380251014 +0000 UTC m=+421.154107789 I0628 19:58:08.380621 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-94wwz-tls" condition "Ready" to 2026-06-28 19:58:08.380610354 +0000 UTC m=+421.154467129 I0628 19:58:08.393076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-94wwz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-94wwz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:08.393295 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-94wwz-tls" condition "Ready" to 2026-06-28 19:58:08.393120883 +0000 UTC m=+421.166977638 I0628 19:58:08.566807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-94wwz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-94wwz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:08.597834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-94wwz-kh229" condition "Approved" to 2026-06-28 19:58:08.597822275 +0000 UTC m=+421.371679010 I0628 19:58:08.615473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-94wwz-kh229" condition "Ready" to 2026-06-28 19:58:08.615462132 +0000 UTC m=+421.389318877 I0628 19:58:08.643903 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-94wwz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:58:08.643888572 +0000 UTC m=+421.417745317 I0628 19:58:08.679449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-94wwz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-94wwz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:08.739232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-94wwz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-94wwz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:28.161701 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-28 19:58:28.161681496 +0000 UTC m=+440.935538251 I0628 19:58:28.161757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 19:58:28.161790 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-28 19:58:28.161783099 +0000 UTC m=+440.935639844 I0628 19:58:28.178843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:28.178926 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-28 19:58:28.178918578 +0000 UTC m=+440.952775323 I0628 19:58:28.437472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 19:58:28.470226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pptv2" condition "Approved" to 2026-06-28 19:58:28.470214524 +0000 UTC m=+441.244071279 I0628 19:58:28.487564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pptv2" condition "Ready" to 2026-06-28 19:58:28.487553159 +0000 UTC m=+441.261409914 I0628 19:58:28.519819 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 19:58:28.519808185 +0000 UTC m=+441.293664930 I0628 19:58:28.539594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:01:39.832536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:01:39.832590 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-28 20:01:39.832580324 +0000 UTC m=+632.606437069 I0628 20:01:39.833178 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-28 20:01:39.833173867 +0000 UTC m=+632.607030612 I0628 20:01:39.848704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:01:39.848801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:01:39.848825 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-28 20:01:39.848820986 +0000 UTC m=+632.622677721 I0628 20:01:40.050931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pnhw8" condition "Approved" to 2026-06-28 20:01:40.050916659 +0000 UTC m=+632.824773414 I0628 20:01:40.070533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pnhw8" condition "Ready" to 2026-06-28 20:01:40.070522386 +0000 UTC m=+632.844379141 I0628 20:01:40.095926 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:01:40.095913642 +0000 UTC m=+632.869770387 I0628 20:01:40.127650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:01:40.127851 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:01:40.127847583 +0000 UTC m=+632.901704328 I0628 20:01:40.147923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:01:40.148109 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:01:40.148087184 +0000 UTC m=+632.921943929 I0628 20:02:20.088834 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-28 20:02:20.088816099 +0000 UTC m=+672.862672854 I0628 20:02:20.089136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:02:20.089159 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-28 20:02:20.089155166 +0000 UTC m=+672.863011911 I0628 20:02:20.107332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:02:20.107419 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0628 20:02:20.107438 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-28 20:02:20.107433108 +0000 UTC m=+672.881289843 I0628 20:02:20.373754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-glbjq" condition "Approved" to 2026-06-28 20:02:20.37372442 +0000 UTC m=+673.147581175 I0628 20:02:20.403613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-glbjq" condition "Ready" to 2026-06-28 20:02:20.403597686 +0000 UTC m=+673.177454461 I0628 20:02:20.434516 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:02:20.434504486 +0000 UTC m=+673.208361231 I0628 20:02:20.453155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:02:20.453518 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-28 20:02:20.453509683 +0000 UTC m=+673.227366438 I0628 20:02:20.461152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0628 20:02:20.474568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"