I0609 16:45:53.173730 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0609 16:45:53.173928 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0609 16:45:53.174064 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0609 16:45:53.179461 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0609 16:45:53.180118 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0609 16:45:53.180231 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0609 16:45:53.180232 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0609 16:45:53.184962 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0609 16:45:53.198869 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0609 16:45:53.201965 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0609 16:45:53.201993 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0609 16:45:53.202147 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0609 16:45:53.204893 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0609 16:45:53.210096 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0609 16:45:53.213281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0609 16:45:53.216066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0609 16:45:53.218585 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0609 16:45:53.218622 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0609 16:45:53.218624 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0609 16:45:53.221163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0609 16:45:53.223051 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0609 16:45:53.224816 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0609 16:45:53.226601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0609 16:45:53.231915 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0609 16:45:53.234761 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0609 16:45:53.234796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0609 16:45:53.237256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0609 16:45:53.239258 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0609 16:45:53.241119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0609 16:45:53.242891 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0609 16:45:53.244509 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0609 16:45:53.244588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0609 16:45:53.247729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0609 16:45:53.252420 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:53.253008 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:53.253058 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:53.253373 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:53.254336 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:53.254930 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:53.255493 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:53.255886 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:53.256122 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:53.341619 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:46:03.864639 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-09 16:46:03.86461458 +0000 UTC m=+10.730690254 I0609 16:46:04.628149 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-09 16:46:04.628126984 +0000 UTC m=+11.494202648 I0609 16:46:04.629560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:46:04.629590 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-09 16:46:04.629583787 +0000 UTC m=+11.495659451 E0609 16:46:04.644785 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 16:46:04.644838 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-09 16:46:04.644833802 +0000 UTC m=+11.510909446 E0609 16:46:04.644859 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 16:46:04.647902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:46:04.648161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:46:04.648204 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-09 16:46:04.6481922 +0000 UTC m=+11.514267864 E0609 16:46:04.655450 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0609 16:46:04.655744 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:46:04.656065 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:46:04.656229 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0609 16:46:04.681222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:46:04.687106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-q5rjx" condition "Approved" to 2026-06-09 16:46:04.68709576 +0000 UTC m=+11.553171404 I0609 16:46:04.710321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-q5rjx" condition "Ready" to 2026-06-09 16:46:04.710306424 +0000 UTC m=+11.576382048 I0609 16:46:04.730879 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:46:04.730850301 +0000 UTC m=+11.596925945 I0609 16:46:04.747108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:46:09.657015 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:46:09.656942464 +0000 UTC m=+16.523018138 I0609 16:46:35.391234 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-09 16:46:35.391186813 +0000 UTC m=+42.257262487 I0609 16:46:35.391280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:46:35.391371 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-09 16:46:35.391363739 +0000 UTC m=+42.257439403 I0609 16:46:35.409133 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-09 16:46:35.409122702 +0000 UTC m=+42.275198336 I0609 16:46:35.421799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:46:35.421863 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-09 16:46:35.42185695 +0000 UTC m=+42.287932594 I0609 16:46:35.628207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:46:35.660907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s7w66" condition "Approved" to 2026-06-09 16:46:35.660898645 +0000 UTC m=+42.526974289 I0609 16:46:35.689950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s7w66" condition "Ready" to 2026-06-09 16:46:35.689938836 +0000 UTC m=+42.556014480 I0609 16:46:35.729115 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:46:35.729097795 +0000 UTC m=+42.595173439 I0609 16:46:35.756509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:46:35.756688 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:46:35.756680545 +0000 UTC m=+42.622756169 I0609 16:46:35.760772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:46:35.777554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:46:35.777807 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:46:35.777798803 +0000 UTC m=+42.643874437 I0609 16:46:35.778682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:50:52.266976 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:50:52.266968 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-06-09 16:50:52.266940193 +0000 UTC m=+299.133015837 I0609 16:50:52.267013 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-06-09 16:50:52.267003913 +0000 UTC m=+299.133079577 I0609 16:50:52.284974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:50:52.285076 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-06-09 16:50:52.285063985 +0000 UTC m=+299.151139659 I0609 16:50:52.495770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:50:52.524182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-dz8xs" condition "Approved" to 2026-06-09 16:50:52.524162416 +0000 UTC m=+299.390238060 I0609 16:50:52.548041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-dz8xs" condition "Ready" to 2026-06-09 16:50:52.548029686 +0000 UTC m=+299.414105320 I0609 16:50:52.573225 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:50:52.573215688 +0000 UTC m=+299.439291332 I0609 16:50:52.589714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:51:55.677025 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:51:55.677061 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-09 16:51:55.677050111 +0000 UTC m=+362.543125745 I0609 16:51:55.677363 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-09 16:51:55.677336709 +0000 UTC m=+362.543412353 I0609 16:51:55.690651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:51:55.690735 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:51:55.690761 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-09 16:51:55.69075275 +0000 UTC m=+362.556828394 E0609 16:51:55.693780 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 16:51:55.693867 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-09 16:51:55.693817839 +0000 UTC m=+362.559893483 E0609 16:51:55.693965 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:51:55.711303 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0609 16:51:55.712697 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:51:55.712735 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:51:55.712874 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0609 16:51:55.742910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lm92d" condition "Approved" to 2026-06-09 16:51:55.74281849 +0000 UTC m=+362.608894164 I0609 16:51:55.758014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lm92d" condition "Ready" to 2026-06-09 16:51:55.757993093 +0000 UTC m=+362.624068737 I0609 16:51:55.780516 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:51:55.780498641 +0000 UTC m=+362.646574315 I0609 16:51:55.800695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:51:55.801042 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:51:55.801022999 +0000 UTC m=+362.667098643 I0609 16:51:55.822512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:51:55.862516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:00.711783 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:00.711771514 +0000 UTC m=+367.577847158 I0609 16:52:44.723640 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-09 16:52:44.723614864 +0000 UTC m=+411.589690498 I0609 16:52:44.723716 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:44.724572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:44.726869 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-09 16:52:44.726845331 +0000 UTC m=+411.592920975 I0609 16:52:44.727640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:44.727662 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-09 16:52:44.727658825 +0000 UTC m=+411.593734459 I0609 16:52:44.730296 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-09 16:52:44.730283696 +0000 UTC m=+411.596359330 I0609 16:52:44.730448 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-09 16:52:44.730441282 +0000 UTC m=+411.596516906 I0609 16:52:44.731359 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-09 16:52:44.72377158 +0000 UTC m=+411.589847214 I0609 16:52:44.791212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:44.794017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:44.798239 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-09 16:52:44.794104237 +0000 UTC m=+411.660179871 I0609 16:52:44.798407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:44.798572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:44.798600 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-09 16:52:44.798594077 +0000 UTC m=+411.664669711 I0609 16:52:44.806104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:44.806694 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-09 16:52:44.806675528 +0000 UTC m=+411.672751172 I0609 16:52:45.137052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k24fr" condition "Approved" to 2026-06-09 16:52:45.137041139 +0000 UTC m=+412.003116773 I0609 16:52:45.149815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lns49" condition "Approved" to 2026-06-09 16:52:45.149803012 +0000 UTC m=+412.015878646 I0609 16:52:45.159457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k24fr" condition "Ready" to 2026-06-09 16:52:45.159445712 +0000 UTC m=+412.025521356 I0609 16:52:45.171125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lns49" condition "Ready" to 2026-06-09 16:52:45.171108518 +0000 UTC m=+412.037184202 I0609 16:52:45.182227 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:45.182214651 +0000 UTC m=+412.048290325 I0609 16:52:45.202606 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:45.202597278 +0000 UTC m=+412.068672912 I0609 16:52:45.207444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:45.207805 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:45.207798439 +0000 UTC m=+412.073874083 I0609 16:52:45.230350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:45.239966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:45.240944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:45.305065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2fvl5" condition "Approved" to 2026-06-09 16:52:45.305051756 +0000 UTC m=+412.171127410 I0609 16:52:45.453739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2fvl5" condition "Ready" to 2026-06-09 16:52:45.453727731 +0000 UTC m=+412.319803375 I0609 16:52:46.053651 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:46.053631321 +0000 UTC m=+412.919706965 I0609 16:52:46.147765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:46.148254 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:46.148240177 +0000 UTC m=+413.014315851 I0609 16:52:46.401553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:46.454366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:54.401966 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" condition "Ready" to 2026-06-09 16:52:54.401919789 +0000 UTC m=+421.267995433 I0609 16:52:54.404300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:54.404325 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" condition "Issuing" to 2026-06-09 16:52:54.404320306 +0000 UTC m=+421.270395940 I0609 16:52:54.422575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-phbjw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:54.422675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:54.422699 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" condition "Issuing" to 2026-06-09 16:52:54.422692492 +0000 UTC m=+421.288768136 I0609 16:52:54.597441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-phbjw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:54.607280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-phbjw-lgxcd" condition "Approved" to 2026-06-09 16:52:54.607249713 +0000 UTC m=+421.473325347 I0609 16:52:54.632498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-phbjw-lgxcd" condition "Ready" to 2026-06-09 16:52:54.632487715 +0000 UTC m=+421.498563349 I0609 16:52:54.660788 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:54.660763111 +0000 UTC m=+421.526838755 I0609 16:52:54.686779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-phbjw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:54.687246 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:54.687236487 +0000 UTC m=+421.553312121 I0609 16:52:54.719205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phbjw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-phbjw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:53:07.784109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:53:07.784155 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-09 16:53:07.784147158 +0000 UTC m=+434.650222802 I0609 16:53:07.784537 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-09 16:53:07.784532666 +0000 UTC m=+434.650608310 I0609 16:53:07.805986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:53:07.806129 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-09 16:53:07.80611845 +0000 UTC m=+434.672194094 I0609 16:53:08.292765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:53:08.331400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8clk7" condition "Approved" to 2026-06-09 16:53:08.331371958 +0000 UTC m=+435.197447602 I0609 16:53:08.358510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8clk7" condition "Ready" to 2026-06-09 16:53:08.358491377 +0000 UTC m=+435.224567051 I0609 16:53:08.394540 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:53:08.394522355 +0000 UTC m=+435.260597999 I0609 16:53:08.413993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:53:08.414373 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:53:08.41436739 +0000 UTC m=+435.280443024 I0609 16:53:08.440167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:56:16.596465 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-09 16:56:16.596443438 +0000 UTC m=+623.462519082 I0609 16:56:16.597024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:56:16.597257 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-09 16:56:16.59725003 +0000 UTC m=+623.463325684 I0609 16:56:16.616392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:56:16.616458 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-09 16:56:16.616452479 +0000 UTC m=+623.482528113 I0609 16:56:16.804281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:56:16.833659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-55bgq" condition "Approved" to 2026-06-09 16:56:16.833644432 +0000 UTC m=+623.699720076 I0609 16:56:16.848768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-55bgq" condition "Ready" to 2026-06-09 16:56:16.848756075 +0000 UTC m=+623.714831709 I0609 16:56:16.880875 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:56:16.880858303 +0000 UTC m=+623.746933977 I0609 16:56:16.906388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:56:16.906699 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:56:16.906692103 +0000 UTC m=+623.772767737 I0609 16:56:16.920192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:56:16.936866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:56:59.859233 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-09 16:56:59.859216346 +0000 UTC m=+666.725292010 I0609 16:56:59.860103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:56:59.860200 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-09 16:56:59.860144458 +0000 UTC m=+666.726220092 I0609 16:56:59.873682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:56:59.873870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:56:59.873965 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-09 16:56:59.873889333 +0000 UTC m=+666.739964977 I0609 16:57:00.135465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:57:00.145873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f95zs" condition "Approved" to 2026-06-09 16:57:00.145859846 +0000 UTC m=+667.011935520 I0609 16:57:00.169153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-f95zs" condition "Ready" to 2026-06-09 16:57:00.169141897 +0000 UTC m=+667.035217541 I0609 16:57:00.202847 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:57:00.20283269 +0000 UTC m=+667.068908324 I0609 16:57:00.226789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:57:00.227106 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:57:00.227099435 +0000 UTC m=+667.093175069 I0609 16:57:00.249767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:57:00.250129 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:57:00.250120118 +0000 UTC m=+667.116195762