I0609 01:03:07.616707 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0609 01:03:07.616839 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0609 01:03:07.616962 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0609 01:03:07.623375 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0609 01:03:07.623990 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0609 01:03:07.624082 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0609 01:03:07.624106 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0609 01:03:07.628386 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0609 01:03:07.643499 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0609 01:03:07.644103 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0609 01:03:07.644130 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0609 01:03:07.644143 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0609 01:03:07.647748 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0609 01:03:07.653103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0609 01:03:07.655851 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0609 01:03:07.660908 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0609 01:03:07.664878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0609 01:03:07.667047 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0609 01:03:07.668689 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0609 01:03:07.670551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0609 01:03:07.672248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0609 01:03:07.676750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0609 01:03:07.680571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0609 01:03:07.683568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0609 01:03:07.686638 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0609 01:03:07.689680 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0609 01:03:07.693144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0609 01:03:07.697818 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0609 01:03:07.697858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0609 01:03:07.702564 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0609 01:03:07.702598 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0609 01:03:07.702774 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0609 01:03:07.707806 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0609 01:03:07.711808 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 01:03:07.711940 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 01:03:07.712116 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 01:03:07.731404 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 01:03:07.741488 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 01:03:07.761678 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 01:03:07.771177 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 01:03:07.783921 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 01:03:07.804220 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 01:03:07.812284 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 01:03:23.763995 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-09 01:03:23.763956405 +0000 UTC m=+16.175717188 I0609 01:03:24.458211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:03:24.458273 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-09 01:03:24.458265352 +0000 UTC m=+16.870026135 I0609 01:03:24.458366 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-09 01:03:24.458359013 +0000 UTC m=+16.870119796 E0609 01:03:24.472809 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 01:03:24.472865 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-09 01:03:24.472858637 +0000 UTC m=+16.884619420 E0609 01:03:24.472890 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 01:03:24.475145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:03:24.475186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:03:24.475195 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-09 01:03:24.475192198 +0000 UTC m=+16.886952971 E0609 01:03:24.485022 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0609 01:03:24.485188 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 01:03:24.485389 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 01:03:24.485533 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0609 01:03:24.509799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pp4d5" condition "Approved" to 2026-06-09 01:03:24.509788615 +0000 UTC m=+16.921549398 I0609 01:03:24.521559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pp4d5" condition "Ready" to 2026-06-09 01:03:24.52154639 +0000 UTC m=+16.933307173 I0609 01:03:24.542242 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:03:24.542231963 +0000 UTC m=+16.953992746 I0609 01:03:24.560859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:03:24.561325 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:03:24.561316977 +0000 UTC m=+16.973077760 I0609 01:03:24.569883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:03:24.583727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:03:29.485989 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:03:29.485974542 +0000 UTC m=+21.897735325 I0609 01:03:51.176583 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:03:51.176580 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-09 01:03:51.176536764 +0000 UTC m=+43.588297547 I0609 01:03:51.176619 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-09 01:03:51.176610585 +0000 UTC m=+43.588371368 I0609 01:03:51.192318 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-09 01:03:51.192301665 +0000 UTC m=+43.604062478 I0609 01:03:51.199492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:03:51.199575 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-09 01:03:51.199565656 +0000 UTC m=+43.611326449 I0609 01:03:51.410840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:03:51.449618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dtp7x" condition "Approved" to 2026-06-09 01:03:51.449610774 +0000 UTC m=+43.861371547 I0609 01:03:51.487377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dtp7x" condition "Ready" to 2026-06-09 01:03:51.487364293 +0000 UTC m=+43.899125076 I0609 01:03:51.525211 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:03:51.523181231 +0000 UTC m=+43.934942014 I0609 01:03:51.559045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:03:51.559956 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:03:51.559940964 +0000 UTC m=+43.971701747 I0609 01:03:51.562434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:03:51.570068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:03:51.570449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:03:51.570641 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:03:51.570635147 +0000 UTC m=+43.982395940 I0609 01:07:59.892267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:07:59.892297 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-06-09 01:07:59.892290569 +0000 UTC m=+292.304051352 I0609 01:07:59.892751 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-06-09 01:07:59.892746116 +0000 UTC m=+292.304506899 I0609 01:07:59.911663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:07:59.911728 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-06-09 01:07:59.911721227 +0000 UTC m=+292.323482030 I0609 01:08:00.099654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:08:00.127422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-wxwnv" condition "Approved" to 2026-06-09 01:08:00.12741139 +0000 UTC m=+292.539172173 I0609 01:08:00.158112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-wxwnv" condition "Ready" to 2026-06-09 01:08:00.15810059 +0000 UTC m=+292.569861373 I0609 01:08:00.188835 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:08:00.18882225 +0000 UTC m=+292.600583063 I0609 01:08:00.213656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:08:00.214295 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:08:00.21428614 +0000 UTC m=+292.626046943 I0609 01:08:00.229003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:08:00.255970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:08:00.256367 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:08:00.256358064 +0000 UTC m=+292.668118847 I0609 01:09:05.481524 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-09 01:09:05.481498879 +0000 UTC m=+357.893259692 I0609 01:09:05.481627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:09:05.481669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-09 01:09:05.481660841 +0000 UTC m=+357.893421624 E0609 01:09:05.493021 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 01:09:05.493079 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-09 01:09:05.493068122 +0000 UTC m=+357.904828925 E0609 01:09:05.493149 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 01:09:05.494830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:05.494926 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:09:05.494957 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-09 01:09:05.494949119 +0000 UTC m=+357.906709912 E0609 01:09:05.505368 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0609 01:09:05.505455 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 01:09:05.505484 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 01:09:05.505517 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0609 01:09:05.532406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m2x6v" condition "Approved" to 2026-06-09 01:09:05.532395257 +0000 UTC m=+357.944156040 I0609 01:09:05.532767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:05.545326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m2x6v" condition "Ready" to 2026-06-09 01:09:05.545320099 +0000 UTC m=+357.957080882 I0609 01:09:05.563419 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:09:05.563408205 +0000 UTC m=+357.975169008 I0609 01:09:05.581491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:10.506704 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:09:10.506689936 +0000 UTC m=+362.918450739 I0609 01:09:50.615522 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-09 01:09:50.615473096 +0000 UTC m=+403.027233869 I0609 01:09:50.615748 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:09:50.615767 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-09 01:09:50.61576401 +0000 UTC m=+403.027524783 I0609 01:09:50.631821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:09:50.631851 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-09 01:09:50.631845228 +0000 UTC m=+403.043606001 I0609 01:09:50.634996 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-09 01:09:50.634985461 +0000 UTC m=+403.046746234 I0609 01:09:50.659776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:09:50.659803 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-09 01:09:50.659797628 +0000 UTC m=+403.071558401 I0609 01:09:50.660139 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-09 01:09:50.660135312 +0000 UTC m=+403.071896085 I0609 01:09:50.676871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:50.676918 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-09 01:09:50.67691303 +0000 UTC m=+403.088673803 I0609 01:09:50.683077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:50.683323 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:09:50.683347 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-09 01:09:50.683342637 +0000 UTC m=+403.095103410 I0609 01:09:50.685197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:50.685289 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-09 01:09:50.685281863 +0000 UTC m=+403.097042646 I0609 01:09:50.839574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:50.882150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-v7d9g" condition "Approved" to 2026-06-09 01:09:50.882132645 +0000 UTC m=+403.293893458 I0609 01:09:50.912736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-v7d9g" condition "Ready" to 2026-06-09 01:09:50.912624389 +0000 UTC m=+403.324385162 I0609 01:09:50.954610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-d2k22" condition "Approved" to 2026-06-09 01:09:50.954585919 +0000 UTC m=+403.366346692 I0609 01:09:50.965287 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:09:50.965272734 +0000 UTC m=+403.377033517 I0609 01:09:50.978866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-d2k22" condition "Ready" to 2026-06-09 01:09:50.978857149 +0000 UTC m=+403.390617912 I0609 01:09:50.994867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:51.038356 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:09:51.038345606 +0000 UTC m=+403.450106379 I0609 01:09:51.101754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:51.156136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0609 01:09:51.361217 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-2b2wp\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0609 01:09:51.469836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kk928" condition "Approved" to 2026-06-09 01:09:51.469823039 +0000 UTC m=+403.881583812 I0609 01:09:51.575561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kk928" condition "Ready" to 2026-06-09 01:09:51.575549463 +0000 UTC m=+403.987310246 I0609 01:09:52.139867 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:09:52.139859906 +0000 UTC m=+404.551620679 I0609 01:09:52.210450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:52.210774 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:09:52.210767917 +0000 UTC m=+404.622528700 I0609 01:09:52.408859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:59.697116 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h29zt-tls" condition "Ready" to 2026-06-09 01:09:59.697102888 +0000 UTC m=+412.108863661 I0609 01:09:59.697543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h29zt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:09:59.697558 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h29zt-tls" condition "Issuing" to 2026-06-09 01:09:59.697555744 +0000 UTC m=+412.109316517 I0609 01:09:59.714672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h29zt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h29zt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:59.714715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h29zt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:09:59.714725 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h29zt-tls" condition "Issuing" to 2026-06-09 01:09:59.714721285 +0000 UTC m=+412.126482058 I0609 01:09:59.883827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h29zt-cnd7b" condition "Approved" to 2026-06-09 01:09:59.883816986 +0000 UTC m=+412.295577759 I0609 01:09:59.912067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h29zt-cnd7b" condition "Ready" to 2026-06-09 01:09:59.912052216 +0000 UTC m=+412.323812999 I0609 01:09:59.935603 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h29zt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:09:59.935591575 +0000 UTC m=+412.347352348 I0609 01:09:59.952447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h29zt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h29zt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:09:59.953039 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h29zt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:09:59.953030119 +0000 UTC m=+412.364790932 I0609 01:09:59.976649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h29zt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h29zt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:10:12.251198 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:10:12.251230 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-09 01:10:12.251226849 +0000 UTC m=+424.662987622 I0609 01:10:12.251193 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-09 01:10:12.251179069 +0000 UTC m=+424.662939852 I0609 01:10:12.267628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:10:12.267763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:10:12.267794 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-09 01:10:12.267788091 +0000 UTC m=+424.679548864 I0609 01:10:12.446626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:10:12.453834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sjnsn" condition "Approved" to 2026-06-09 01:10:12.453822349 +0000 UTC m=+424.865583122 I0609 01:10:12.471040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sjnsn" condition "Ready" to 2026-06-09 01:10:12.47103208 +0000 UTC m=+424.882792853 I0609 01:10:12.504121 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:10:12.504107161 +0000 UTC m=+424.915867944 I0609 01:10:12.533315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:13:26.242592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:13:26.242625 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-09 01:13:26.242618092 +0000 UTC m=+618.654378875 I0609 01:13:26.243052 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-09 01:13:26.243045587 +0000 UTC m=+618.654806370 I0609 01:13:26.260169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:13:26.260220 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:13:26.260233 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-09 01:13:26.260228222 +0000 UTC m=+618.671989005 I0609 01:13:26.543351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:13:26.551999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fs6jq" condition "Approved" to 2026-06-09 01:13:26.551982662 +0000 UTC m=+618.963743465 I0609 01:13:26.576589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fs6jq" condition "Ready" to 2026-06-09 01:13:26.576579891 +0000 UTC m=+618.988340664 I0609 01:13:26.607674 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:13:26.607667471 +0000 UTC m=+619.019428244 I0609 01:13:26.640533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:14:08.550898 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-09 01:14:08.550867069 +0000 UTC m=+660.962627872 I0609 01:14:08.554662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:14:08.554700 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-09 01:14:08.554692987 +0000 UTC m=+660.966453770 I0609 01:14:08.566082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:14:08.566145 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 01:14:08.566168 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-09 01:14:08.566161847 +0000 UTC m=+660.977922620 I0609 01:14:08.784985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 01:14:08.796985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dkw9b" condition "Approved" to 2026-06-09 01:14:08.796973552 +0000 UTC m=+661.208734355 I0609 01:14:08.820384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dkw9b" condition "Ready" to 2026-06-09 01:14:08.820372857 +0000 UTC m=+661.232133640 I0609 01:14:08.843706 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 01:14:08.843690418 +0000 UTC m=+661.255451191 I0609 01:14:08.861807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"