I0612 07:19:46.574379 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0612 07:19:46.574685 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0612 07:19:46.574882 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0612 07:19:46.579827 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0612 07:19:46.580519 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0612 07:19:46.580576 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0612 07:19:46.580529 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0612 07:19:46.584710 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0612 07:19:46.602643 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0612 07:19:46.606071 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0612 07:19:46.606138 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0612 07:19:46.611943 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0612 07:19:46.615559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0612 07:19:46.618901 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0612 07:19:46.618921 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0612 07:19:46.618929 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0612 07:19:46.619022 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0612 07:19:46.620687 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0612 07:19:46.622794 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0612 07:19:46.624233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0612 07:19:46.626026 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0612 07:19:46.627853 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0612 07:19:46.628133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0612 07:19:46.631706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0612 07:19:46.634970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0612 07:19:46.637601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0612 07:19:46.639488 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0612 07:19:46.640777 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0612 07:19:46.640941 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0612 07:19:46.642983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0612 07:19:46.644471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0612 07:19:46.646786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0612 07:19:46.648587 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0612 07:19:46.650581 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 07:19:46.651093 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 07:19:46.652723 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 07:19:46.652759 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 07:19:46.677537 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 07:19:46.694624 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 07:19:46.708892 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 07:19:46.727790 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 07:19:46.735212 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 07:19:46.748440 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 07:19:58.475990 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-12 07:19:58.475978144 +0000 UTC m=+11.934507411 I0612 07:19:59.293224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:19:59.293267 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-12 07:19:59.293254558 +0000 UTC m=+12.751783815 I0612 07:19:59.293318 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-12 07:19:59.29330811 +0000 UTC m=+12.751837397 E0612 07:19:59.306647 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 07:19:59.306704 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-12 07:19:59.306697645 +0000 UTC m=+12.765226912 E0612 07:19:59.306724 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 07:19:59.310819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:19:59.310903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:19:59.310935 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-12 07:19:59.310926188 +0000 UTC m=+12.769455485 E0612 07:19:59.318323 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0612 07:19:59.318960 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 07:19:59.319035 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 07:19:59.319078 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0612 07:19:59.343167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:19:59.347930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g8rp8" condition "Approved" to 2026-06-12 07:19:59.347910819 +0000 UTC m=+12.806440116 I0612 07:19:59.364012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g8rp8" condition "Ready" to 2026-06-12 07:19:59.364000782 +0000 UTC m=+12.822530039 I0612 07:19:59.394365 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:19:59.394350872 +0000 UTC m=+12.852880139 I0612 07:19:59.410435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:19:59.410662 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:19:59.410654654 +0000 UTC m=+12.869183911 I0612 07:19:59.425333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:20:04.319679 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:20:04.319666095 +0000 UTC m=+17.778195382 I0612 07:20:28.662958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:20:28.663022 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-12 07:20:28.663017456 +0000 UTC m=+42.121546713 I0612 07:20:28.662958 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-12 07:20:28.662926674 +0000 UTC m=+42.121455941 I0612 07:20:28.686078 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-12 07:20:28.686066118 +0000 UTC m=+42.144595375 I0612 07:20:28.700092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:20:28.700250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:20:28.700360 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-12 07:20:28.700353319 +0000 UTC m=+42.158882586 I0612 07:20:28.826586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:20:28.831945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fdk59" condition "Approved" to 2026-06-12 07:20:28.831934515 +0000 UTC m=+42.290463782 I0612 07:20:28.872494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fdk59" condition "Ready" to 2026-06-12 07:20:28.872474477 +0000 UTC m=+42.331003774 I0612 07:20:28.902706 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:20:28.902690504 +0000 UTC m=+42.361219781 I0612 07:20:28.925257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:20:28.979343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:24:41.788266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:24:41.788309 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-06-12 07:24:41.788304878 +0000 UTC m=+295.246834125 I0612 07:24:41.788383 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-06-12 07:24:41.788373741 +0000 UTC m=+295.246902998 I0612 07:24:41.804096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:24:41.804155 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-06-12 07:24:41.804147809 +0000 UTC m=+295.262677076 I0612 07:24:41.915224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:24:41.951435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-gkvgc" condition "Approved" to 2026-06-12 07:24:41.951427651 +0000 UTC m=+295.409956908 I0612 07:24:41.980779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-gkvgc" condition "Ready" to 2026-06-12 07:24:41.980765752 +0000 UTC m=+295.439295039 I0612 07:24:42.011597 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:24:42.011580986 +0000 UTC m=+295.470110273 I0612 07:24:42.037992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:24:42.038273 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:24:42.038267586 +0000 UTC m=+295.496796863 I0612 07:24:42.045960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:24:42.059522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:25:47.578046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:25:47.578090 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-12 07:25:47.57808181 +0000 UTC m=+361.036611107 I0612 07:25:47.578037 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-12 07:25:47.578008788 +0000 UTC m=+361.036538085 E0612 07:25:47.588470 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 07:25:47.588519 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-12 07:25:47.588510198 +0000 UTC m=+361.047039475 E0612 07:25:47.588578 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 07:25:47.591902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:25:47.591979 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-12 07:25:47.59196703 +0000 UTC m=+361.050496297 E0612 07:25:47.603078 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0612 07:25:47.603347 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 07:25:47.603378 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 07:25:47.603429 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0612 07:25:47.608133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:25:47.629593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5pm79" condition "Approved" to 2026-06-12 07:25:47.629579254 +0000 UTC m=+361.088108521 I0612 07:25:47.642310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5pm79" condition "Ready" to 2026-06-12 07:25:47.642297696 +0000 UTC m=+361.100826963 I0612 07:25:47.665515 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:25:47.665468746 +0000 UTC m=+361.123998013 I0612 07:25:47.680786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:25:47.680960 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:25:47.680947674 +0000 UTC m=+361.139476921 I0612 07:25:47.701907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:25:47.703441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:25:52.603687 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:25:52.60367424 +0000 UTC m=+366.062203537 I0612 07:26:34.279062 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-12 07:26:34.278993944 +0000 UTC m=+407.737523201 I0612 07:26:34.279097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:26:34.279615 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-12 07:26:34.279609647 +0000 UTC m=+407.738138904 I0612 07:26:34.282809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:26:34.282957 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-12 07:26:34.282952287 +0000 UTC m=+407.741481554 I0612 07:26:34.283441 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-12 07:26:34.283432157 +0000 UTC m=+407.741961414 I0612 07:26:34.285527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:26:34.285548 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-12 07:26:34.285545101 +0000 UTC m=+407.744074358 I0612 07:26:34.285816 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-12 07:26:34.285801577 +0000 UTC m=+407.744330834 I0612 07:26:34.311049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:34.311141 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-12 07:26:34.311133861 +0000 UTC m=+407.769663118 I0612 07:26:34.326780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:34.326849 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-12 07:26:34.326840462 +0000 UTC m=+407.785369729 I0612 07:26:34.327398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:34.327436 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-12 07:26:34.327431914 +0000 UTC m=+407.785961191 I0612 07:26:34.445613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:34.446578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:34.541158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-txvgm" condition "Approved" to 2026-06-12 07:26:34.541143337 +0000 UTC m=+407.999672634 I0612 07:26:34.784256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:34.785673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4pgn7" condition "Approved" to 2026-06-12 07:26:34.785657039 +0000 UTC m=+408.244186306 I0612 07:26:34.789293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-txvgm" condition "Ready" to 2026-06-12 07:26:34.789281665 +0000 UTC m=+408.247810912 I0612 07:26:34.830309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4pgn7" condition "Ready" to 2026-06-12 07:26:34.830298898 +0000 UTC m=+408.288828155 I0612 07:26:34.981799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2x8q4" condition "Approved" to 2026-06-12 07:26:34.981774641 +0000 UTC m=+408.440303938 I0612 07:26:35.078848 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:26:35.078830241 +0000 UTC m=+408.537359528 I0612 07:26:35.194520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2x8q4" condition "Ready" to 2026-06-12 07:26:35.194509134 +0000 UTC m=+408.653038391 I0612 07:26:35.257511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:35.291451 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:26:35.291434201 +0000 UTC m=+408.749963458 I0612 07:26:35.348844 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:26:35.348817987 +0000 UTC m=+408.807347244 I0612 07:26:35.378561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:35.379135 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:26:35.379126844 +0000 UTC m=+408.837656101 I0612 07:26:35.632558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:35.633000 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:26:35.632990971 +0000 UTC m=+409.091520238 I0612 07:26:35.945364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:36.062394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:36.112494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:43.476419 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls" condition "Ready" to 2026-06-12 07:26:43.476394998 +0000 UTC m=+416.934924265 I0612 07:26:43.476891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:26:43.476910 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls" condition "Issuing" to 2026-06-12 07:26:43.476906059 +0000 UTC m=+416.935435326 I0612 07:26:43.491132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:43.491216 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls" condition "Ready" to 2026-06-12 07:26:43.491211805 +0000 UTC m=+416.949741072 I0612 07:26:43.672198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:43.714093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dvbjz-z26km" condition "Approved" to 2026-06-12 07:26:43.714077008 +0000 UTC m=+417.172606275 I0612 07:26:43.731472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dvbjz-z26km" condition "Ready" to 2026-06-12 07:26:43.731462688 +0000 UTC m=+417.189991955 I0612 07:26:43.764075 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:26:43.76406333 +0000 UTC m=+417.222592597 I0612 07:26:43.784886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:43.833660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvbjz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:56.057334 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-12 07:26:56.057317429 +0000 UTC m=+429.515846696 I0612 07:26:56.057781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:26:56.057827 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-12 07:26:56.057821179 +0000 UTC m=+429.516350446 I0612 07:26:56.071499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:56.071577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:26:56.071596 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-12 07:26:56.071588595 +0000 UTC m=+429.530117872 I0612 07:26:56.264212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7brpg" condition "Approved" to 2026-06-12 07:26:56.264194269 +0000 UTC m=+429.722723566 I0612 07:26:56.286549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7brpg" condition "Ready" to 2026-06-12 07:26:56.286538758 +0000 UTC m=+429.745068025 I0612 07:26:56.312126 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:26:56.312087842 +0000 UTC m=+429.770617099 I0612 07:26:56.331992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:56.332251 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:26:56.332245718 +0000 UTC m=+429.790774965 I0612 07:26:56.350287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:56.350712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:26:56.357437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:30:15.476173 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-12 07:30:15.47615457 +0000 UTC m=+628.934683837 I0612 07:30:15.476397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:30:15.476581 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-12 07:30:15.476566947 +0000 UTC m=+628.935096234 I0612 07:30:15.498470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:30:15.498557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 07:30:15.498577 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-12 07:30:15.498570661 +0000 UTC m=+628.957099928 I0612 07:30:15.704797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 07:30:15.709351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8xw59" condition "Approved" to 2026-06-12 07:30:15.709341913 +0000 UTC m=+629.167871170 I0612 07:30:15.738829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8xw59" condition "Ready" to 2026-06-12 07:30:15.738803397 +0000 UTC m=+629.197332684 I0612 07:30:15.780872 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 07:30:15.780852174 +0000 UTC m=+629.239381441 I0612 07:30:15.805394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"