I0611 06:22:08.745966 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0611 06:22:08.746088 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0611 06:22:08.746176 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0611 06:22:08.749518 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0611 06:22:08.750038 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0611 06:22:08.750229 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0611 06:22:08.750240 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0611 06:22:08.752428 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0611 06:22:08.767567 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0611 06:22:08.772689 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0611 06:22:08.777009 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0611 06:22:08.779627 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0611 06:22:08.779685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0611 06:22:08.781765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0611 06:22:08.783517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0611 06:22:08.785325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0611 06:22:08.787262 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0611 06:22:08.791129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0611 06:22:08.793004 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0611 06:22:08.793024 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0611 06:22:08.793032 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0611 06:22:08.793145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0611 06:22:08.795030 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0611 06:22:08.796745 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0611 06:22:08.798414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0611 06:22:08.800003 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0611 06:22:08.800023 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0611 06:22:08.800081 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0611 06:22:08.801962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0611 06:22:08.803848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0611 06:22:08.807384 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0611 06:22:08.811280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0611 06:22:08.815513 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0611 06:22:08.818110 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:22:08.818924 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:22:08.819454 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:22:08.819622 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:22:08.837134 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:22:08.850697 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:22:08.864717 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:22:08.880672 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:22:08.892323 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:22:08.901799 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:22:19.896396 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-11 06:22:19.896362809 +0000 UTC m=+11.182955962 I0611 06:22:20.750366 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-11 06:22:20.750347672 +0000 UTC m=+12.036940835 I0611 06:22:20.750436 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:22:20.750764 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-11 06:22:20.750742668 +0000 UTC m=+12.037335831 E0611 06:22:20.839928 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0611 06:22:20.839987 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-11 06:22:20.839980748 +0000 UTC m=+12.126573871 E0611 06:22:20.840007 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0611 06:22:20.844062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:22:20.844165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:22:20.844209 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-11 06:22:20.844200151 +0000 UTC m=+12.130793314 E0611 06:22:21.045376 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0611 06:22:21.045942 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0611 06:22:21.046202 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0611 06:22:21.046550 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0611 06:22:21.447612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:22:21.451343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-87frx" condition "Approved" to 2026-06-11 06:22:21.45132354 +0000 UTC m=+12.737916703 I0611 06:22:21.632658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-87frx" condition "Ready" to 2026-06-11 06:22:21.632640256 +0000 UTC m=+12.919233409 I0611 06:22:21.765383 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:22:21.765367716 +0000 UTC m=+13.051960879 I0611 06:22:21.783610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:22:21.840571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:22:26.046674 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:22:26.046653418 +0000 UTC m=+17.333246571 I0611 06:22:52.233737 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-11 06:22:52.233061672 +0000 UTC m=+43.519654805 I0611 06:22:52.234366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:22:52.234454 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-11 06:22:52.234441811 +0000 UTC m=+43.521034954 I0611 06:22:52.262330 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-11 06:22:52.262313871 +0000 UTC m=+43.548907004 I0611 06:22:52.268132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:22:52.268196 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-11 06:22:52.268190595 +0000 UTC m=+43.554783718 I0611 06:22:52.501361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:22:52.580181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6qdsl" condition "Approved" to 2026-06-11 06:22:52.580160191 +0000 UTC m=+43.866753334 I0611 06:22:52.612071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6qdsl" condition "Ready" to 2026-06-11 06:22:52.612059508 +0000 UTC m=+43.898652631 I0611 06:22:52.650208 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:22:52.650187426 +0000 UTC m=+43.936780579 I0611 06:22:52.698300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:22:52.698320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:22:52.698703 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:22:52.698694071 +0000 UTC m=+43.985287194 I0611 06:22:52.722955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:22:52.723316 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:22:52.723305804 +0000 UTC m=+44.009898937 I0611 06:27:50.629121 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready" to 2026-06-11 06:27:50.62909786 +0000 UTC m=+341.915690993 I0611 06:27:50.629540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:27:50.629592 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Issuing" to 2026-06-11 06:27:50.629580402 +0000 UTC m=+341.916173535 I0611 06:27:50.647413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:27:50.647653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:27:50.647749 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Issuing" to 2026-06-11 06:27:50.647677644 +0000 UTC m=+341.934270777 I0611 06:27:50.889129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-89.nip.io-tls-lqlsb" condition "Approved" to 2026-06-11 06:27:50.889114994 +0000 UTC m=+342.175708117 I0611 06:27:50.916123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-89.nip.io-tls-lqlsb" condition "Ready" to 2026-06-11 06:27:50.916114719 +0000 UTC m=+342.202707842 I0611 06:27:50.942004 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:27:50.941978406 +0000 UTC m=+342.228571569 I0611 06:27:50.959977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:27:50.960430 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:27:50.960423247 +0000 UTC m=+342.247016390 I0611 06:27:50.973453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:27:50.982216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:28:57.728386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:28:57.728529 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-11 06:28:57.72851447 +0000 UTC m=+409.015107603 I0611 06:28:57.728855 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-11 06:28:57.728834487 +0000 UTC m=+409.015427620 I0611 06:28:57.744684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:28:57.744786 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-11 06:28:57.744776282 +0000 UTC m=+409.031369455 E0611 06:28:57.749227 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0611 06:28:57.749268 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-11 06:28:57.749262854 +0000 UTC m=+409.035855987 E0611 06:28:57.749356 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0611 06:28:57.764483 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0611 06:28:57.764732 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0611 06:28:57.764787 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0611 06:28:57.764837 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0611 06:28:57.768097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:28:57.786028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fbsjx" condition "Approved" to 2026-06-11 06:28:57.786014553 +0000 UTC m=+409.072607686 I0611 06:28:57.800388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fbsjx" condition "Ready" to 2026-06-11 06:28:57.800376566 +0000 UTC m=+409.086969699 I0611 06:28:57.822692 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:28:57.82268411 +0000 UTC m=+409.109277233 I0611 06:28:57.840096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:28:57.878102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:02.764957 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:29:02.764941967 +0000 UTC m=+414.051535100 I0611 06:29:45.189244 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-11 06:29:45.189227032 +0000 UTC m=+456.475820155 I0611 06:29:45.195300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:29:45.195336 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-11 06:29:45.195328683 +0000 UTC m=+456.481921806 I0611 06:29:45.196505 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-11 06:29:45.196496885 +0000 UTC m=+456.483090018 I0611 06:29:45.196981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:29:45.197001 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-11 06:29:45.196998174 +0000 UTC m=+456.483591297 I0611 06:29:45.197202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:29:45.197279 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-11 06:29:45.197273559 +0000 UTC m=+456.483866702 I0611 06:29:45.197583 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-11 06:29:45.197577255 +0000 UTC m=+456.484170388 I0611 06:29:45.237545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:45.237622 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-11 06:29:45.237613516 +0000 UTC m=+456.524206639 I0611 06:29:45.237888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:45.237964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:45.238071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:29:45.238081 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-11 06:29:45.238078486 +0000 UTC m=+456.524671609 I0611 06:29:45.238147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:29:45.238162 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-11 06:29:45.238157977 +0000 UTC m=+456.524751120 I0611 06:29:45.415608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wdq45" condition "Approved" to 2026-06-11 06:29:45.415593812 +0000 UTC m=+456.702186945 I0611 06:29:45.434279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wdq45" condition "Ready" to 2026-06-11 06:29:45.434257873 +0000 UTC m=+456.720851036 I0611 06:29:45.471275 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:29:45.471252149 +0000 UTC m=+456.757845312 I0611 06:29:45.503080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:45.512786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:45.536148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hx5d9" condition "Approved" to 2026-06-11 06:29:45.536134986 +0000 UTC m=+456.822728109 I0611 06:29:45.551130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hx5d9" condition "Ready" to 2026-06-11 06:29:45.551115769 +0000 UTC m=+456.837708892 I0611 06:29:45.582727 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:29:45.582705478 +0000 UTC m=+456.869298641 I0611 06:29:45.601743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:45.602043 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:29:45.602035451 +0000 UTC m=+456.888628584 I0611 06:29:45.821520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:45.922044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:46.126214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vgmc9" condition "Approved" to 2026-06-11 06:29:46.126191411 +0000 UTC m=+457.412784564 I0611 06:29:46.383529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vgmc9" condition "Ready" to 2026-06-11 06:29:46.383511047 +0000 UTC m=+457.670104200 I0611 06:29:46.674409 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:29:46.674386315 +0000 UTC m=+457.960979448 I0611 06:29:46.771107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:46.771449 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:29:46.771439657 +0000 UTC m=+458.058032790 I0611 06:29:47.106028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:59.302566 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" condition "Ready" to 2026-06-11 06:29:59.30161453 +0000 UTC m=+470.588207693 I0611 06:29:59.303304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:29:59.303338 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" condition "Issuing" to 2026-06-11 06:29:59.303331431 +0000 UTC m=+470.589924584 I0611 06:29:59.318188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t5btw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:59.318271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:29:59.318287 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" condition "Issuing" to 2026-06-11 06:29:59.318282747 +0000 UTC m=+470.604875880 I0611 06:29:59.674306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t5btw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:59.679806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-t5btw-5gskd" condition "Approved" to 2026-06-11 06:29:59.679791384 +0000 UTC m=+470.966384547 I0611 06:29:59.694564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-t5btw-5gskd" condition "Ready" to 2026-06-11 06:29:59.694553097 +0000 UTC m=+470.981146240 I0611 06:29:59.729736 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:29:59.729725694 +0000 UTC m=+471.016318817 I0611 06:29:59.751218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t5btw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:59.751811 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:29:59.751801747 +0000 UTC m=+471.038394880 I0611 06:29:59.758145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t5btw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:29:59.768730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t5btw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t5btw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:30:16.865001 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-11 06:30:16.864976528 +0000 UTC m=+488.151569641 I0611 06:30:16.865430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:30:16.865480 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-11 06:30:16.865469357 +0000 UTC m=+488.152062490 I0611 06:30:16.884607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:30:16.884716 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-11 06:30:16.88470708 +0000 UTC m=+488.171300213 I0611 06:30:17.121619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:30:17.156069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8bs75" condition "Approved" to 2026-06-11 06:30:17.156058157 +0000 UTC m=+488.442651280 I0611 06:30:17.173423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8bs75" condition "Ready" to 2026-06-11 06:30:17.173407558 +0000 UTC m=+488.460000691 I0611 06:30:17.209058 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:30:17.209044662 +0000 UTC m=+488.495637795 I0611 06:30:17.237273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:30:17.238162 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:30:17.238156526 +0000 UTC m=+488.524749649 I0611 06:30:17.264160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:33:38.028495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:33:38.028595 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-11 06:33:38.028581701 +0000 UTC m=+689.315174864 I0611 06:33:38.028799 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-11 06:33:38.028785564 +0000 UTC m=+689.315378697 I0611 06:33:38.046731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:33:38.046965 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-11 06:33:38.046955637 +0000 UTC m=+689.333548770 I0611 06:33:38.149846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:33:38.186151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qvcth" condition "Approved" to 2026-06-11 06:33:38.186139115 +0000 UTC m=+689.472732238 I0611 06:33:38.212194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qvcth" condition "Ready" to 2026-06-11 06:33:38.21218308 +0000 UTC m=+689.498776213 I0611 06:33:38.244052 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:33:38.24403596 +0000 UTC m=+689.530629093 I0611 06:33:38.266340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:34:23.382217 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-11 06:34:23.382201872 +0000 UTC m=+734.668795005 I0611 06:34:23.382432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:34:23.382473 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-11 06:34:23.382464462 +0000 UTC m=+734.669057595 I0611 06:34:23.398453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:34:23.398579 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-11 06:34:23.398567634 +0000 UTC m=+734.685160787 I0611 06:34:23.547073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:34:23.582501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wcsr4" condition "Approved" to 2026-06-11 06:34:23.582488958 +0000 UTC m=+734.869082071 I0611 06:34:23.599778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-wcsr4" condition "Ready" to 2026-06-11 06:34:23.599769135 +0000 UTC m=+734.886362248 I0611 06:34:23.629164 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:34:23.629145373 +0000 UTC m=+734.915738496 I0611 06:34:23.655667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:34:23.655959 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:34:23.655950062 +0000 UTC m=+734.942543205 I0611 06:34:23.673782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"