I0605 02:36:49.026874 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0605 02:36:49.027001 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0605 02:36:49.027073 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0605 02:36:49.029578 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0605 02:36:49.029892 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0605 02:36:49.029951 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0605 02:36:49.029983 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0605 02:36:49.032019 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0605 02:36:49.044980 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0605 02:36:49.049214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0605 02:36:49.055241 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0605 02:36:49.055420 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0605 02:36:49.055329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0605 02:36:49.058537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0605 02:36:49.061387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0605 02:36:49.064415 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0605 02:36:49.066449 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0605 02:36:49.068414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0605 02:36:49.070741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0605 02:36:49.075575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0605 02:36:49.079666 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0605 02:36:49.081746 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0605 02:36:49.084101 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0605 02:36:49.086451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0605 02:36:49.089147 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0605 02:36:49.089190 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0605 02:36:49.089349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0605 02:36:49.092035 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0605 02:36:49.094173 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0605 02:36:49.094200 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0605 02:36:49.094306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0605 02:36:49.096181 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0605 02:36:49.099078 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0605 02:36:49.103158 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 02:36:49.103625 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 02:36:49.104849 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 02:36:49.118962 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 02:36:49.134878 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 02:36:49.151762 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 02:36:49.168711 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 02:36:49.182655 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 02:36:49.196426 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 02:36:49.208982 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 02:37:05.753352 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-05 02:37:05.753325893 +0000 UTC m=+16.769303762 I0605 02:37:06.471085 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-05 02:37:06.471072093 +0000 UTC m=+17.487049972 I0605 02:37:06.471410 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:37:06.471469 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-05 02:37:06.471461023 +0000 UTC m=+17.487438902 E0605 02:37:06.489585 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0605 02:37:06.489682 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-05 02:37:06.489673239 +0000 UTC m=+17.505651088 E0605 02:37:06.489714 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0605 02:37:06.491583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:37:06.491882 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-05 02:37:06.491873613 +0000 UTC m=+17.507851462 E0605 02:37:06.506733 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0605 02:37:06.507009 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0605 02:37:06.507071 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0605 02:37:06.507104 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0605 02:37:06.515734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:37:06.539831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-764vp" condition "Approved" to 2026-06-05 02:37:06.539812926 +0000 UTC m=+17.555790825 I0605 02:37:06.553410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-764vp" condition "Ready" to 2026-06-05 02:37:06.553401208 +0000 UTC m=+17.569379057 I0605 02:37:06.582889 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:37:06.582875098 +0000 UTC m=+17.598852947 I0605 02:37:06.602551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:37:06.639799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:37:11.507988 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:37:11.507975452 +0000 UTC m=+22.523953321 I0605 02:37:37.157944 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-05 02:37:37.157897887 +0000 UTC m=+48.173875746 I0605 02:37:37.158103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:37:37.158203 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-05 02:37:37.158191255 +0000 UTC m=+48.174169134 I0605 02:37:37.169721 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-05 02:37:37.169701861 +0000 UTC m=+48.185679750 I0605 02:37:37.177587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:37:37.177733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:37:37.177807 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-05 02:37:37.177795495 +0000 UTC m=+48.193773344 I0605 02:37:37.525158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8sqkg" condition "Approved" to 2026-06-05 02:37:37.52514891 +0000 UTC m=+48.541126759 I0605 02:37:37.555227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8sqkg" condition "Ready" to 2026-06-05 02:37:37.555213151 +0000 UTC m=+48.571191030 I0605 02:37:37.592733 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:37:37.59272384 +0000 UTC m=+48.608701679 I0605 02:37:37.616749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:37:37.675707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:42:29.503566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:42:29.503596 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Issuing" to 2026-06-05 02:42:29.503589214 +0000 UTC m=+340.519567073 I0605 02:42:29.503642 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Ready" to 2026-06-05 02:42:29.503632665 +0000 UTC m=+340.519610534 I0605 02:42:29.518026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:42:29.518092 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Ready" to 2026-06-05 02:42:29.51808518 +0000 UTC m=+340.534063029 I0605 02:42:29.680544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:42:29.707469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-240.nip.io-tls-8b7hj" condition "Approved" to 2026-06-05 02:42:29.707457582 +0000 UTC m=+340.723435421 I0605 02:42:29.735501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-240.nip.io-tls-8b7hj" condition "Ready" to 2026-06-05 02:42:29.735490529 +0000 UTC m=+340.751468368 I0605 02:42:29.766569 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:42:29.766555421 +0000 UTC m=+340.782533270 I0605 02:42:29.786009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:43:35.784545 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-05 02:43:35.784517151 +0000 UTC m=+406.800495010 I0605 02:43:35.784970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:43:35.785019 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-05 02:43:35.785013652 +0000 UTC m=+406.800991491 E0605 02:43:35.825088 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0605 02:43:35.825235 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-05 02:43:35.825220976 +0000 UTC m=+406.841198845 E0605 02:43:35.826146 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0605 02:43:35.827002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:43:35.827211 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-05 02:43:35.82719877 +0000 UTC m=+406.843176679 E0605 02:43:35.842014 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0605 02:43:35.842375 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0605 02:43:35.842540 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0605 02:43:35.842769 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0605 02:43:35.845412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:43:35.865184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-p8rtw" condition "Approved" to 2026-06-05 02:43:35.865139343 +0000 UTC m=+406.881117222 I0605 02:43:35.883437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-p8rtw" condition "Ready" to 2026-06-05 02:43:35.883426555 +0000 UTC m=+406.899404404 I0605 02:43:35.905263 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:43:35.905251175 +0000 UTC m=+406.921229024 I0605 02:43:35.924577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:43:35.924862 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:43:35.924856046 +0000 UTC m=+406.940833895 I0605 02:43:35.939177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:43:35.939355 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:43:35.939347592 +0000 UTC m=+406.955325451 I0605 02:43:40.843170 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:43:40.843160529 +0000 UTC m=+411.859138388 I0605 02:44:44.505044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:44:44.505088 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-05 02:44:44.505083276 +0000 UTC m=+475.521061115 I0605 02:44:44.505455 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-05 02:44:44.505451194 +0000 UTC m=+475.521429033 I0605 02:44:44.505880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:44:44.505907 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-05 02:44:44.505901343 +0000 UTC m=+475.521879212 I0605 02:44:44.506347 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-05 02:44:44.506338282 +0000 UTC m=+475.522316151 I0605 02:44:44.506449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:44:44.506498 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-05 02:44:44.506488975 +0000 UTC m=+475.522466824 I0605 02:44:44.506826 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-05 02:44:44.506820083 +0000 UTC m=+475.522797952 I0605 02:44:44.774316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:44.774396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:44.775372 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-05 02:44:44.775354953 +0000 UTC m=+475.791332802 I0605 02:44:44.775553 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:44:44.775582 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-05 02:44:44.775577128 +0000 UTC m=+475.791554967 I0605 02:44:44.776306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:44.776369 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-05 02:44:44.776364895 +0000 UTC m=+475.792342734 I0605 02:44:45.635694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:46.056338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:46.347343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:46.347626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6trgr" condition "Approved" to 2026-06-05 02:44:46.347621398 +0000 UTC m=+477.363599237 I0605 02:44:46.348628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mj8zq" condition "Approved" to 2026-06-05 02:44:46.348610839 +0000 UTC m=+477.364588688 I0605 02:44:46.676063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rgh2d" condition "Approved" to 2026-06-05 02:44:46.676047484 +0000 UTC m=+477.692025323 I0605 02:44:46.677116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mj8zq" condition "Ready" to 2026-06-05 02:44:46.677111436 +0000 UTC m=+477.693089275 I0605 02:44:46.679428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6trgr" condition "Ready" to 2026-06-05 02:44:46.679421994 +0000 UTC m=+477.695399833 I0605 02:44:46.981213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rgh2d" condition "Ready" to 2026-06-05 02:44:46.981202706 +0000 UTC m=+477.997180555 I0605 02:44:47.857241 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:44:47.857226248 +0000 UTC m=+478.873204097 I0605 02:44:48.049769 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:44:48.049754875 +0000 UTC m=+479.065732724 I0605 02:44:48.050418 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:44:48.050402609 +0000 UTC m=+479.066380458 I0605 02:44:48.472803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:48.473026 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:44:48.473019138 +0000 UTC m=+479.488996977 I0605 02:44:48.738726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:48.740856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:49.068965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:49.664464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:44:49.664869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:45:01.362744 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls" condition "Ready" to 2026-06-05 02:45:01.362727198 +0000 UTC m=+492.378705047 I0605 02:45:01.362788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:45:01.362826 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls" condition "Issuing" to 2026-06-05 02:45:01.36281466 +0000 UTC m=+492.378792539 I0605 02:45:01.381034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:45:01.381186 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls" condition "Ready" to 2026-06-05 02:45:01.381177766 +0000 UTC m=+492.397155615 I0605 02:45:01.483710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:45:01.663591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gzv5j-9md7l" condition "Approved" to 2026-06-05 02:45:01.663582994 +0000 UTC m=+492.679560833 I0605 02:45:01.682700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gzv5j-9md7l" condition "Ready" to 2026-06-05 02:45:01.682688577 +0000 UTC m=+492.698666436 I0605 02:45:01.711668 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:45:01.711654311 +0000 UTC m=+492.727632160 I0605 02:45:01.728663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gzv5j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:45:17.830913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:45:17.830937 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-05 02:45:17.830931634 +0000 UTC m=+508.846909473 I0605 02:45:17.831740 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-05 02:45:17.831735 +0000 UTC m=+508.847712839 I0605 02:45:17.848319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:45:17.848513 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:45:17.848603 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-05 02:45:17.848596282 +0000 UTC m=+508.864574141 I0605 02:45:18.156862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ss69m" condition "Approved" to 2026-06-05 02:45:18.156846574 +0000 UTC m=+509.172824423 I0605 02:45:18.180866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ss69m" condition "Ready" to 2026-06-05 02:45:18.180855121 +0000 UTC m=+509.196832960 I0605 02:45:18.212328 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:45:18.212309729 +0000 UTC m=+509.228287608 I0605 02:45:18.236276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:48:38.811990 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-05 02:48:38.811968929 +0000 UTC m=+709.827946808 I0605 02:48:38.813951 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:48:38.814129 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-05 02:48:38.814116361 +0000 UTC m=+709.830094250 I0605 02:48:38.828419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:48:38.828682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:48:38.828708 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-05 02:48:38.828703056 +0000 UTC m=+709.844680895 I0605 02:48:39.241200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:48:39.244311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ztt45" condition "Approved" to 2026-06-05 02:48:39.244291856 +0000 UTC m=+710.260269735 I0605 02:48:39.262830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ztt45" condition "Ready" to 2026-06-05 02:48:39.262820905 +0000 UTC m=+710.278798754 I0605 02:48:39.296579 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:48:39.296562602 +0000 UTC m=+710.312540471 I0605 02:48:39.327681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:48:39.328015 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:48:39.328010395 +0000 UTC m=+710.343988234 I0605 02:48:39.342371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:48:39.342795 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:48:39.342787244 +0000 UTC m=+710.358765093 I0605 02:49:19.113362 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-05 02:49:19.113349078 +0000 UTC m=+750.129326917 I0605 02:49:19.113558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 02:49:19.113598 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-05 02:49:19.113594575 +0000 UTC m=+750.129572424 I0605 02:49:19.142473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:49:19.142581 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-05 02:49:19.142571765 +0000 UTC m=+750.158549614 I0605 02:49:19.258701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:49:19.291986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-slsn4" condition "Approved" to 2026-06-05 02:49:19.291975348 +0000 UTC m=+750.307953197 I0605 02:49:19.315113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-slsn4" condition "Ready" to 2026-06-05 02:49:19.31510091 +0000 UTC m=+750.331078749 I0605 02:49:19.351995 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:49:19.351967544 +0000 UTC m=+750.367945393 I0605 02:49:19.378788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:49:19.379216 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:49:19.379195667 +0000 UTC m=+750.395173506 I0605 02:49:19.393923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 02:49:19.394362 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 02:49:19.394353113 +0000 UTC m=+750.410330962 I0605 02:49:19.396184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"