I0612 10:50:27.256582 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0612 10:50:27.256760 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0612 10:50:27.256988 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0612 10:50:27.263376 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0612 10:50:27.263811 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0612 10:50:27.266169 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0612 10:50:27.266331 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0612 10:50:27.267228 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0612 10:50:27.286465 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0612 10:50:27.290172 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0612 10:50:27.290234 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0612 10:50:27.292788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0612 10:50:27.295168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0612 10:50:27.297777 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0612 10:50:27.303700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0612 10:50:27.305420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0612 10:50:27.307013 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0612 10:50:27.307067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0612 10:50:27.312049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0612 10:50:27.315998 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0612 10:50:27.319312 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0612 10:50:27.319519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0612 10:50:27.322294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0612 10:50:27.328236 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0612 10:50:27.331155 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0612 10:50:27.333510 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0612 10:50:27.333540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0612 10:50:27.336041 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0612 10:50:27.338656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0612 10:50:27.340732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0612 10:50:27.342484 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0612 10:50:27.342502 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0612 10:50:27.343046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0612 10:50:27.352767 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 10:50:27.352986 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 10:50:27.353159 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 10:50:27.384454 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 10:50:27.393593 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 10:50:27.448159 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 10:50:27.450891 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 10:50:27.463223 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 10:50:27.478747 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 10:50:27.491524 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 10:50:39.545966 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-12 10:50:39.545926495 +0000 UTC m=+12.328422448 I0612 10:50:40.251790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:50:40.251897 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-12 10:50:40.251885659 +0000 UTC m=+13.034381632 I0612 10:50:40.253558 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-12 10:50:40.253536224 +0000 UTC m=+13.036032207 E0612 10:50:40.265262 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 10:50:40.265349 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-12 10:50:40.265340384 +0000 UTC m=+13.047836337 E0612 10:50:40.265373 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 10:50:40.267948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:50:40.268554 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-12 10:50:40.268542422 +0000 UTC m=+13.051038405 E0612 10:50:40.279588 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0612 10:50:40.279794 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 10:50:40.279885 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 10:50:40.279960 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0612 10:50:40.289764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:50:40.315662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bmdbs" condition "Approved" to 2026-06-12 10:50:40.315648489 +0000 UTC m=+13.098144462 I0612 10:50:40.326828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bmdbs" condition "Ready" to 2026-06-12 10:50:40.326818426 +0000 UTC m=+13.109314369 I0612 10:50:40.347516 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:50:40.347504105 +0000 UTC m=+13.130000058 I0612 10:50:40.365802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:50:40.366127 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:50:40.366119969 +0000 UTC m=+13.148615912 I0612 10:50:40.374793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:50:40.383951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:50:45.280976 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:50:45.280950024 +0000 UTC m=+18.063445987 I0612 10:51:07.466806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:51:07.466850 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-12 10:51:07.466836863 +0000 UTC m=+40.249332806 I0612 10:51:07.467135 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-12 10:51:07.467122969 +0000 UTC m=+40.249618922 I0612 10:51:07.490546 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-12 10:51:07.490535578 +0000 UTC m=+40.273031531 I0612 10:51:07.492192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:51:07.495895 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-12 10:51:07.49588592 +0000 UTC m=+40.278381883 I0612 10:51:07.798504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:51:07.833571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rgscv" condition "Approved" to 2026-06-12 10:51:07.833560733 +0000 UTC m=+40.616056686 I0612 10:51:07.864714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rgscv" condition "Ready" to 2026-06-12 10:51:07.864703756 +0000 UTC m=+40.647199709 I0612 10:51:07.893772 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:51:07.893735413 +0000 UTC m=+40.676231366 I0612 10:51:07.912451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:51:07.912760 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:51:07.912755713 +0000 UTC m=+40.695251656 I0612 10:51:07.939172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:55:16.560905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-73.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:55:16.561573 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Issuing" to 2026-06-12 10:55:16.560959554 +0000 UTC m=+289.343455537 I0612 10:55:16.562446 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready" to 2026-06-12 10:55:16.562436827 +0000 UTC m=+289.344932800 I0612 10:55:16.585050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:55:16.585139 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready" to 2026-06-12 10:55:16.58512803 +0000 UTC m=+289.367624003 I0612 10:55:16.918646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:55:16.946807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-73.nip.io-tls-sd69h" condition "Approved" to 2026-06-12 10:55:16.946787109 +0000 UTC m=+289.729283082 I0612 10:55:16.972795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-73.nip.io-tls-sd69h" condition "Ready" to 2026-06-12 10:55:16.972784104 +0000 UTC m=+289.755280047 I0612 10:55:17.006723 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:55:17.006710032 +0000 UTC m=+289.789205985 I0612 10:55:17.026615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:55:17.090207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:56:21.499267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:56:21.499327 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-12 10:56:21.499300638 +0000 UTC m=+354.281796621 I0612 10:56:21.499556 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-12 10:56:21.499526492 +0000 UTC m=+354.282022465 I0612 10:56:21.513666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:56:21.513785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:56:21.513815 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-12 10:56:21.513805406 +0000 UTC m=+354.296301379 E0612 10:56:21.516408 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 10:56:21.516456 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-12 10:56:21.516449755 +0000 UTC m=+354.298945698 E0612 10:56:21.516494 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 10:56:21.528663 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0612 10:56:21.530107 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 10:56:21.530191 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 10:56:21.530289 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0612 10:56:21.552477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nfhsq" condition "Approved" to 2026-06-12 10:56:21.552458911 +0000 UTC m=+354.334954894 I0612 10:56:21.555780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:56:21.591766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nfhsq" condition "Ready" to 2026-06-12 10:56:21.591754868 +0000 UTC m=+354.374250811 I0612 10:56:21.649516 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:56:21.649501596 +0000 UTC m=+354.431997549 I0612 10:56:21.672289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:56:21.672515 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:56:21.672505672 +0000 UTC m=+354.455001635 I0612 10:56:21.690161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:56:21.691150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:56:21.692440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:56:21.692651 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:56:21.692644364 +0000 UTC m=+354.475140307 I0612 10:56:26.532873 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:56:26.532348636 +0000 UTC m=+359.314844619 I0612 10:57:09.458128 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-12 10:57:09.458090001 +0000 UTC m=+402.240585944 I0612 10:57:09.459343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:57:09.459362 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-12 10:57:09.459358977 +0000 UTC m=+402.241854920 I0612 10:57:09.461075 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-12 10:57:09.461071631 +0000 UTC m=+402.243567574 I0612 10:57:09.462801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:57:09.462836 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-12 10:57:09.462828905 +0000 UTC m=+402.245324858 I0612 10:57:09.463132 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:57:09.463154 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-12 10:57:09.463148282 +0000 UTC m=+402.245644225 I0612 10:57:09.463319 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-12 10:57:09.463314366 +0000 UTC m=+402.245810329 I0612 10:57:09.498083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:09.498161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:57:09.498183 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-12 10:57:09.498177259 +0000 UTC m=+402.280673212 I0612 10:57:09.522410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:09.525283 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-12 10:57:09.525273617 +0000 UTC m=+402.307769560 I0612 10:57:09.540269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:09.540349 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-12 10:57:09.540339606 +0000 UTC m=+402.322835589 I0612 10:57:09.671651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wmpw6" condition "Approved" to 2026-06-12 10:57:09.671629006 +0000 UTC m=+402.454124949 I0612 10:57:09.681663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:09.694892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wmpw6" condition "Ready" to 2026-06-12 10:57:09.694881128 +0000 UTC m=+402.477377071 I0612 10:57:09.731850 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:57:09.731839053 +0000 UTC m=+402.514335006 I0612 10:57:09.751865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:09.752336 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:57:09.75232997 +0000 UTC m=+402.534825923 I0612 10:57:09.790041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:09.793134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0612 10:57:09.799447 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-stx9c\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0612 10:57:09.839683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:09.868673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-76x2c" condition "Approved" to 2026-06-12 10:57:09.868662902 +0000 UTC m=+402.651158845 I0612 10:57:09.887455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-76x2c" condition "Ready" to 2026-06-12 10:57:09.887446086 +0000 UTC m=+402.669942029 I0612 10:57:10.014248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:57:10.014277 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-12 10:57:10.014271716 +0000 UTC m=+402.796767659 I0612 10:57:10.100716 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:57:10.100701047 +0000 UTC m=+402.883196990 I0612 10:57:10.285180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:10.340320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:10.340632 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:57:10.340624401 +0000 UTC m=+403.123120344 I0612 10:57:10.441602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sjgtc" condition "Approved" to 2026-06-12 10:57:10.44158722 +0000 UTC m=+403.224083163 I0612 10:57:10.496060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:10.725247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sjgtc" condition "Ready" to 2026-06-12 10:57:10.725233055 +0000 UTC m=+403.507729008 I0612 10:57:11.045106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jwqvz" condition "Approved" to 2026-06-12 10:57:11.045086432 +0000 UTC m=+403.827582385 E0612 10:57:11.233447 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-wxnn8\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0612 10:57:11.395202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jwqvz" condition "Ready" to 2026-06-12 10:57:11.395187237 +0000 UTC m=+404.177683190 I0612 10:57:11.884853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:11.988537 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:57:11.988527698 +0000 UTC m=+404.771023641 I0612 10:57:12.137189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:12.137636 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:57:12.137627122 +0000 UTC m=+404.920123075 I0612 10:57:12.437327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:17.774263 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" condition "Ready" to 2026-06-12 10:57:17.774248943 +0000 UTC m=+410.556744896 I0612 10:57:17.774307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:57:17.774338 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" condition "Issuing" to 2026-06-12 10:57:17.774329554 +0000 UTC m=+410.556825507 I0612 10:57:17.790964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:17.791118 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:57:17.791158 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" condition "Issuing" to 2026-06-12 10:57:17.791137762 +0000 UTC m=+410.573633715 I0612 10:57:17.919608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:17.924510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5pjnv-ghgw8" condition "Approved" to 2026-06-12 10:57:17.924498157 +0000 UTC m=+410.706994100 I0612 10:57:17.950349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5pjnv-ghgw8" condition "Ready" to 2026-06-12 10:57:17.950338245 +0000 UTC m=+410.732834188 I0612 10:57:17.983667 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:57:17.983646633 +0000 UTC m=+410.766142586 I0612 10:57:18.014112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:18.015351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:18.015567 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5pjnv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:57:18.015560114 +0000 UTC m=+410.798056057 I0612 10:57:29.687595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 10:57:29.687627 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-12 10:57:29.687620012 +0000 UTC m=+422.470115945 I0612 10:57:29.687624 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-12 10:57:29.687601291 +0000 UTC m=+422.470097244 I0612 10:57:29.709277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:29.709358 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-12 10:57:29.709351844 +0000 UTC m=+422.491847777 I0612 10:57:29.888379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 10:57:29.917204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7cz7r" condition "Approved" to 2026-06-12 10:57:29.917194246 +0000 UTC m=+422.699690179 I0612 10:57:29.938312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7cz7r" condition "Ready" to 2026-06-12 10:57:29.938298004 +0000 UTC m=+422.720793957 I0612 10:57:29.961603 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 10:57:29.961585658 +0000 UTC m=+422.744081621 I0612 10:57:29.978789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 11:00:40.100056 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-12 11:00:40.100015516 +0000 UTC m=+612.882511469 I0612 11:00:40.100203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 11:00:40.100325 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-12 11:00:40.100313972 +0000 UTC m=+612.882809945 I0612 11:00:40.120032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 11:00:40.120122 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 11:00:40.120145 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-12 11:00:40.120136355 +0000 UTC m=+612.902632338 I0612 11:00:40.377712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 11:00:40.387160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8nvc6" condition "Approved" to 2026-06-12 11:00:40.387146165 +0000 UTC m=+613.169642108 I0612 11:00:40.407031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8nvc6" condition "Ready" to 2026-06-12 11:00:40.407021408 +0000 UTC m=+613.189517361 I0612 11:00:40.433224 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 11:00:40.433208273 +0000 UTC m=+613.215704216 I0612 11:00:40.459237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 11:00:40.460265 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 11:00:40.460257057 +0000 UTC m=+613.242753010 I0612 11:00:40.476656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"