I0602 23:47:22.860028 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0602 23:47:22.860213 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0602 23:47:22.860381 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0602 23:47:22.864944 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0602 23:47:22.865350 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0602 23:47:22.865440 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0602 23:47:22.865459 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0602 23:47:22.870873 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0602 23:47:22.887535 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0602 23:47:22.891140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0602 23:47:22.893896 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0602 23:47:22.898044 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0602 23:47:22.900735 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0602 23:47:22.903096 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0602 23:47:22.903122 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0602 23:47:22.909315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0602 23:47:22.913288 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0602 23:47:22.915947 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0602 23:47:22.915964 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0602 23:47:22.916137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0602 23:47:22.917856 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0602 23:47:22.919773 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0602 23:47:22.921681 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0602 23:47:22.923614 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0602 23:47:22.923630 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0602 23:47:22.923655 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0602 23:47:22.925790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0602 23:47:22.927417 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0602 23:47:22.927501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0602 23:47:22.932541 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0602 23:47:22.935856 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0602 23:47:22.938705 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0602 23:47:22.941735 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0602 23:47:22.945093 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 23:47:22.945491 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 23:47:22.946592 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 23:47:22.964975 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 23:47:22.975440 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 23:47:23.000201 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 23:47:23.038949 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 23:47:23.047186 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 23:47:23.063826 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 23:47:23.080295 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 23:47:39.443921 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-02 23:47:39.443888788 +0000 UTC m=+16.616865991 I0602 23:47:40.135942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:47:40.136027 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-02 23:47:40.136015378 +0000 UTC m=+17.308992581 I0602 23:47:40.135954 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-02 23:47:40.135943837 +0000 UTC m=+17.308921050 E0602 23:47:40.154803 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 23:47:40.154859 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-02 23:47:40.15485201 +0000 UTC m=+17.327829193 E0602 23:47:40.154880 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 23:47:40.159358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:47:40.159443 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-02 23:47:40.159433791 +0000 UTC m=+17.332410974 E0602 23:47:40.173071 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0602 23:47:40.173470 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 23:47:40.173539 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 23:47:40.173605 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0602 23:47:40.176737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:47:40.176790 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-02 23:47:40.176783444 +0000 UTC m=+17.349760617 I0602 23:47:40.180532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hhbrr" condition "Approved" to 2026-06-02 23:47:40.180527674 +0000 UTC m=+17.353504847 I0602 23:47:40.195011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hhbrr" condition "Ready" to 2026-06-02 23:47:40.195000438 +0000 UTC m=+17.367977621 I0602 23:47:40.218894 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:47:40.218884218 +0000 UTC m=+17.391861401 I0602 23:47:40.236502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:47:40.276795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:47:45.174339 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:47:45.174325143 +0000 UTC m=+22.347302346 I0602 23:48:06.245491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:48:06.245528 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-02 23:48:06.245517347 +0000 UTC m=+43.418494530 I0602 23:48:06.245830 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-02 23:48:06.245808941 +0000 UTC m=+43.418786154 I0602 23:48:06.254790 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-02 23:48:06.254781315 +0000 UTC m=+43.427758488 I0602 23:48:06.285196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:48:06.285346 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-02 23:48:06.28533971 +0000 UTC m=+43.458316883 I0602 23:48:06.649317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:48:06.685915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cchpn" condition "Approved" to 2026-06-02 23:48:06.685903494 +0000 UTC m=+43.858880677 I0602 23:48:06.715657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cchpn" condition "Ready" to 2026-06-02 23:48:06.715644348 +0000 UTC m=+43.888621531 I0602 23:48:06.747524 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:48:06.747512419 +0000 UTC m=+43.920489602 I0602 23:48:06.767965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:48:06.768297 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:48:06.76828711 +0000 UTC m=+43.941264303 I0602 23:48:06.804370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:48:06.804777 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:48:06.804768984 +0000 UTC m=+43.977746177 I0602 23:52:12.128394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:52:12.128446 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-06-02 23:52:12.128420759 +0000 UTC m=+289.301397962 I0602 23:52:12.128697 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-06-02 23:52:12.128390858 +0000 UTC m=+289.301368071 I0602 23:52:12.146439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:52:12.146516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:52:12.146537 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-06-02 23:52:12.146530751 +0000 UTC m=+289.319507934 I0602 23:52:12.392768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-nm4zj" condition "Approved" to 2026-06-02 23:52:12.392756608 +0000 UTC m=+289.565733791 I0602 23:52:12.419164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-nm4zj" condition "Ready" to 2026-06-02 23:52:12.419148752 +0000 UTC m=+289.592125965 I0602 23:52:12.447193 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:52:12.447180156 +0000 UTC m=+289.620157369 I0602 23:52:12.466548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:52:12.504470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:15.379310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:53:15.379318 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-02 23:53:15.379275315 +0000 UTC m=+352.552252498 I0602 23:53:15.379352 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-02 23:53:15.379344146 +0000 UTC m=+352.552321329 E0602 23:53:15.394354 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 23:53:15.394408 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-02 23:53:15.394384985 +0000 UTC m=+352.567362168 E0602 23:53:15.394455 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 23:53:15.394727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:15.394838 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-02 23:53:15.394829833 +0000 UTC m=+352.567807016 E0602 23:53:15.415033 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0602 23:53:15.415235 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 23:53:15.415291 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 23:53:15.415594 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0602 23:53:15.418776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:15.434682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7p8f4" condition "Approved" to 2026-06-02 23:53:15.43467384 +0000 UTC m=+352.607651023 I0602 23:53:15.447911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7p8f4" condition "Ready" to 2026-06-02 23:53:15.447900773 +0000 UTC m=+352.620877956 I0602 23:53:15.473340 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:53:15.473328151 +0000 UTC m=+352.646305334 I0602 23:53:15.492345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:15.492572 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:53:15.492566984 +0000 UTC m=+352.665544157 I0602 23:53:15.500185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:15.508302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:15.508592 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:53:15.508586388 +0000 UTC m=+352.681563581 I0602 23:53:15.510587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:20.416152 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:53:20.416138725 +0000 UTC m=+357.589115938 I0602 23:53:59.260253 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-02 23:53:59.260222018 +0000 UTC m=+396.433199231 I0602 23:53:59.260400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:53:59.260532 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-02 23:53:59.260525312 +0000 UTC m=+396.433502485 I0602 23:53:59.260640 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-02 23:53:59.260632774 +0000 UTC m=+396.433609987 I0602 23:53:59.260874 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-02 23:53:59.260867707 +0000 UTC m=+396.433844910 I0602 23:53:59.260987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:53:59.261148 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:53:59.261177 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-02 23:53:59.261170842 +0000 UTC m=+396.434148045 I0602 23:53:59.261003 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-02 23:53:59.26099991 +0000 UTC m=+396.433977083 I0602 23:53:59.307626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:59.307693 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:53:59.307711 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-02 23:53:59.307704236 +0000 UTC m=+396.480681409 I0602 23:53:59.314186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:59.314285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:53:59.314353 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-02 23:53:59.314345819 +0000 UTC m=+396.487322992 I0602 23:53:59.321275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:59.321358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:53:59.321394 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-02 23:53:59.321374095 +0000 UTC m=+396.494351268 I0602 23:53:59.470032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-v5klw" condition "Approved" to 2026-06-02 23:53:59.470019075 +0000 UTC m=+396.642996248 I0602 23:53:59.487810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-v5klw" condition "Ready" to 2026-06-02 23:53:59.487798591 +0000 UTC m=+396.660775764 I0602 23:53:59.512648 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:53:59.512636736 +0000 UTC m=+396.685613909 I0602 23:53:59.531534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:59.531924 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:53:59.531916523 +0000 UTC m=+396.704893696 I0602 23:53:59.567390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:59.567724 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:53:59.567713499 +0000 UTC m=+396.740690682 I0602 23:53:59.636610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:59.643173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bthp5" condition "Approved" to 2026-06-02 23:53:59.643156005 +0000 UTC m=+396.816133188 I0602 23:53:59.666268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bthp5" condition "Ready" to 2026-06-02 23:53:59.666253214 +0000 UTC m=+396.839230397 I0602 23:53:59.715485 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:53:59.715475937 +0000 UTC m=+396.888453100 I0602 23:53:59.732691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:53:59.732931 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:53:59.732922498 +0000 UTC m=+396.905899681 I0602 23:53:59.861368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:54:00.086118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m68n4" condition "Approved" to 2026-06-02 23:54:00.08610327 +0000 UTC m=+397.259080453 I0602 23:54:00.193367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m68n4" condition "Ready" to 2026-06-02 23:54:00.193358243 +0000 UTC m=+397.366335426 I0602 23:54:00.669995 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:54:00.669985624 +0000 UTC m=+397.842962797 I0602 23:54:00.732854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:54:00.733177 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:54:00.733169198 +0000 UTC m=+397.906146381 I0602 23:54:00.984334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:54:01.033428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:54:06.674808 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls" condition "Ready" to 2026-06-02 23:54:06.67479453 +0000 UTC m=+403.847771713 I0602 23:54:06.675115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:54:06.675260 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls" condition "Issuing" to 2026-06-02 23:54:06.675249116 +0000 UTC m=+403.848226339 I0602 23:54:06.687690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:54:06.687913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:54:06.687938 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls" condition "Issuing" to 2026-06-02 23:54:06.68793276 +0000 UTC m=+403.860909943 I0602 23:54:06.946877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p4rdn-gs69j" condition "Approved" to 2026-06-02 23:54:06.94685489 +0000 UTC m=+404.119832053 I0602 23:54:06.991924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p4rdn-gs69j" condition "Ready" to 2026-06-02 23:54:06.991915586 +0000 UTC m=+404.164892759 I0602 23:54:07.077028 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:54:07.077012849 +0000 UTC m=+404.249990022 I0602 23:54:07.107025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:54:07.107320 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:54:07.107315781 +0000 UTC m=+404.280292954 I0602 23:54:07.129261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p4rdn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:54:19.430860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:54:19.430900 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-02 23:54:19.430884936 +0000 UTC m=+416.603862109 I0602 23:54:19.430907 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-02 23:54:19.430900116 +0000 UTC m=+416.603877289 I0602 23:54:19.444396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:54:19.444484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:54:19.444507 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-02 23:54:19.444500477 +0000 UTC m=+416.617477660 I0602 23:54:19.629416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bvn4x" condition "Approved" to 2026-06-02 23:54:19.629403457 +0000 UTC m=+416.802380630 I0602 23:54:19.656792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bvn4x" condition "Ready" to 2026-06-02 23:54:19.656781514 +0000 UTC m=+416.829758687 I0602 23:54:19.694112 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:54:19.694098483 +0000 UTC m=+416.867075656 I0602 23:54:19.712397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:57:27.848293 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-02 23:57:27.848266421 +0000 UTC m=+605.021243604 I0602 23:57:27.848898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:57:27.849275 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-02 23:57:27.848929588 +0000 UTC m=+605.021906801 I0602 23:57:27.870840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:57:27.870916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:57:27.870937 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-02 23:57:27.870931353 +0000 UTC m=+605.043908536 I0602 23:57:28.116728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w97b6" condition "Approved" to 2026-06-02 23:57:28.116719473 +0000 UTC m=+605.289696646 I0602 23:57:28.138866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w97b6" condition "Ready" to 2026-06-02 23:57:28.138854319 +0000 UTC m=+605.311831502 I0602 23:57:28.167468 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:57:28.167454016 +0000 UTC m=+605.340431199 I0602 23:57:28.192980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:57:28.234280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:58:06.007311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 23:58:06.007435 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-02 23:58:06.007425736 +0000 UTC m=+643.180402919 I0602 23:58:06.008378 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-02 23:58:06.008370126 +0000 UTC m=+643.181347319 I0602 23:58:06.023732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:58:06.023916 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-02 23:58:06.023789595 +0000 UTC m=+643.196766768 I0602 23:58:06.422144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:58:06.452613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kjw9q" condition "Approved" to 2026-06-02 23:58:06.452593773 +0000 UTC m=+643.625570986 I0602 23:58:06.478355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kjw9q" condition "Ready" to 2026-06-02 23:58:06.478344144 +0000 UTC m=+643.651321327 I0602 23:58:06.515235 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 23:58:06.515222797 +0000 UTC m=+643.688199980 I0602 23:58:06.529585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 23:58:06.594791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"