I0601 19:23:00.857976 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0601 19:23:00.858289 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0601 19:23:00.858473 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0601 19:23:00.862923 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0601 19:23:00.863485 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0601 19:23:00.863551 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0601 19:23:00.863617 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0601 19:23:00.866887 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0601 19:23:00.882903 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0601 19:23:00.886378 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0601 19:23:00.886451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0601 19:23:00.891665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0601 19:23:00.893672 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0601 19:23:00.895816 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0601 19:23:00.897402 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0601 19:23:00.897419 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0601 19:23:00.897510 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0601 19:23:00.899240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0601 19:23:00.900966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0601 19:23:00.906145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0601 19:23:00.913509 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0601 19:23:00.916816 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0601 19:23:00.916857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0601 19:23:00.919320 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0601 19:23:00.921250 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0601 19:23:00.923036 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0601 19:23:00.923054 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0601 19:23:00.923070 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0601 19:23:00.924918 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0601 19:23:00.926950 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0601 19:23:00.928792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0601 19:23:00.930590 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0601 19:23:00.939379 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0601 19:23:00.942856 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 19:23:00.942983 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 19:23:00.943898 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 19:23:00.960478 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 19:23:00.977683 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 19:23:00.994346 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 19:23:01.010613 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 19:23:01.027236 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 19:23:01.039105 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 19:23:01.043735 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 19:23:19.455354 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-01 19:23:19.45533507 +0000 UTC m=+18.636091476 I0601 19:23:20.186442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:23:20.186507 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-01 19:23:20.186499304 +0000 UTC m=+19.367255700 I0601 19:23:20.186396 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-01 19:23:20.186380062 +0000 UTC m=+19.367136478 E0601 19:23:20.257493 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0601 19:23:20.257557 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-01 19:23:20.257549568 +0000 UTC m=+19.438305964 E0601 19:23:20.257589 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0601 19:23:20.261356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:23:20.261463 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-01 19:23:20.261452588 +0000 UTC m=+19.442209004 E0601 19:23:20.271919 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0601 19:23:20.273084 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0601 19:23:20.273108 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0601 19:23:20.273194 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0601 19:23:20.282374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:23:20.282528 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-01 19:23:20.282520022 +0000 UTC m=+19.463276428 I0601 19:23:20.287551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tclj2" condition "Approved" to 2026-06-01 19:23:20.287541406 +0000 UTC m=+19.468297802 I0601 19:23:20.316864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tclj2" condition "Ready" to 2026-06-01 19:23:20.316852419 +0000 UTC m=+19.497608815 I0601 19:23:20.354910 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:23:20.354898453 +0000 UTC m=+19.535654839 I0601 19:23:20.376987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:23:20.377539 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:23:20.377529219 +0000 UTC m=+19.558285635 I0601 19:23:20.388131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:23:20.476988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:23:20.477239 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:23:20.477234133 +0000 UTC m=+19.657990529 I0601 19:23:25.272970 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:23:25.272949819 +0000 UTC m=+24.453706245 I0601 19:23:51.522065 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-01 19:23:51.522049067 +0000 UTC m=+50.702805463 I0601 19:23:51.522147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:23:51.522194 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-01 19:23:51.522185809 +0000 UTC m=+50.702942205 I0601 19:23:51.538097 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-01 19:23:51.538081325 +0000 UTC m=+50.718837721 I0601 19:23:51.564527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:23:51.564585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:23:51.564610 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-01 19:23:51.564601164 +0000 UTC m=+50.745357540 I0601 19:23:51.725494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:23:51.735720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jcmh6" condition "Approved" to 2026-06-01 19:23:51.7357116 +0000 UTC m=+50.916467996 I0601 19:23:51.763176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jcmh6" condition "Ready" to 2026-06-01 19:23:51.763162526 +0000 UTC m=+50.943918922 I0601 19:23:51.804914 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:23:51.804894929 +0000 UTC m=+50.985651335 I0601 19:23:51.828300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:23:51.828658 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:23:51.828651921 +0000 UTC m=+51.009408317 I0601 19:23:51.845641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:23:51.845987 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:23:51.845980861 +0000 UTC m=+51.026737257 I0601 19:28:16.040935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:28:16.040967 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-06-01 19:28:16.04096001 +0000 UTC m=+315.221716396 I0601 19:28:16.040996 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-06-01 19:28:16.040976771 +0000 UTC m=+315.221733197 I0601 19:28:16.055806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:28:16.055970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:28:16.055993 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-06-01 19:28:16.05598648 +0000 UTC m=+315.236742876 I0601 19:28:16.353482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-z97tx" condition "Approved" to 2026-06-01 19:28:16.353463571 +0000 UTC m=+315.534219987 I0601 19:28:16.385247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-z97tx" condition "Ready" to 2026-06-01 19:28:16.38523469 +0000 UTC m=+315.565991096 I0601 19:28:16.412926 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:28:16.412913813 +0000 UTC m=+315.593670219 I0601 19:28:16.487538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:29:22.255109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:29:22.255190 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-01 19:29:22.255179815 +0000 UTC m=+381.435936241 I0601 19:29:22.255771 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-01 19:29:22.255761756 +0000 UTC m=+381.436518182 I0601 19:29:22.275025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:29:22.275084 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-01 19:29:22.27507711 +0000 UTC m=+381.455833506 E0601 19:29:22.275226 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0601 19:29:22.275268 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-01 19:29:22.275258694 +0000 UTC m=+381.456015110 E0601 19:29:22.275331 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0601 19:29:22.299803 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0601 19:29:22.300277 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0601 19:29:22.300627 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0601 19:29:22.300914 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0601 19:29:22.309702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:29:22.330018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7kg6t" condition "Approved" to 2026-06-01 19:29:22.33000271 +0000 UTC m=+381.510759136 I0601 19:29:22.351475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7kg6t" condition "Ready" to 2026-06-01 19:29:22.351462806 +0000 UTC m=+381.532219202 I0601 19:29:22.380788 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:29:22.380776254 +0000 UTC m=+381.561532650 I0601 19:29:22.558410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:29:22.717504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:29:27.300509 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:29:27.300489293 +0000 UTC m=+386.481245729 I0601 19:30:11.126263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:30:11.126332 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-01 19:30:11.126326147 +0000 UTC m=+430.307082523 I0601 19:30:11.126353 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-01 19:30:11.126341177 +0000 UTC m=+430.307097573 I0601 19:30:11.126296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:30:11.126585 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-01 19:30:11.126578271 +0000 UTC m=+430.307334657 I0601 19:30:11.126652 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-01 19:30:11.126648032 +0000 UTC m=+430.307404428 I0601 19:30:11.126615 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-01 19:30:11.126597002 +0000 UTC m=+430.307353408 I0601 19:30:11.126610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:30:11.126854 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-01 19:30:11.126847826 +0000 UTC m=+430.307604222 I0601 19:30:11.188958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:11.189131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:11.189210 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-01 19:30:11.189199593 +0000 UTC m=+430.369956019 I0601 19:30:11.189654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:11.189712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:30:11.189742 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-01 19:30:11.189735463 +0000 UTC m=+430.370491889 I0601 19:30:11.190112 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-01 19:30:11.19010467 +0000 UTC m=+430.370861096 I0601 19:30:11.370494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:11.408408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ql6sh" condition "Approved" to 2026-06-01 19:30:11.408395746 +0000 UTC m=+430.589152142 I0601 19:30:11.436888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ql6sh" condition "Ready" to 2026-06-01 19:30:11.436879818 +0000 UTC m=+430.617636194 I0601 19:30:11.518647 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:30:11.518690 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-01 19:30:11.51868246 +0000 UTC m=+430.699438856 I0601 19:30:11.520955 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:30:11.520943972 +0000 UTC m=+430.701700358 I0601 19:30:11.557610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:11.576535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:11.589392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t7zjk" condition "Approved" to 2026-06-01 19:30:11.589375933 +0000 UTC m=+430.770132319 I0601 19:30:11.591092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:11.604227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:11.696927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t7zjk" condition "Ready" to 2026-06-01 19:30:11.696912705 +0000 UTC m=+430.877669121 I0601 19:30:11.771724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9vb2x" condition "Approved" to 2026-06-01 19:30:11.771711004 +0000 UTC m=+430.952467400 I0601 19:30:11.833135 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:30:11.833123664 +0000 UTC m=+431.013880060 I0601 19:30:11.838279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9vb2x" condition "Ready" to 2026-06-01 19:30:11.838261331 +0000 UTC m=+431.019017757 I0601 19:30:12.141008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:12.606505 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:30:12.606486911 +0000 UTC m=+431.787243327 I0601 19:30:12.639816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:12.640556 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:30:12.640525777 +0000 UTC m=+431.821282193 I0601 19:30:13.264869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:13.268065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:13.332748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:28.763243 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-znrt2-tls" condition "Ready" to 2026-06-01 19:30:28.763228183 +0000 UTC m=+447.943984559 I0601 19:30:28.763262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-znrt2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:30:28.763283 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-znrt2-tls" condition "Issuing" to 2026-06-01 19:30:28.763278454 +0000 UTC m=+447.944034840 I0601 19:30:28.790681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-znrt2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-znrt2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:28.791247 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-znrt2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:30:28.791273 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-znrt2-tls" condition "Issuing" to 2026-06-01 19:30:28.791265466 +0000 UTC m=+447.972021872 I0601 19:30:28.909968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-znrt2-wk2ck" condition "Approved" to 2026-06-01 19:30:28.909947995 +0000 UTC m=+448.090704401 I0601 19:30:28.930156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-znrt2-wk2ck" condition "Ready" to 2026-06-01 19:30:28.930146403 +0000 UTC m=+448.110902789 I0601 19:30:28.986404 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-znrt2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:30:28.986391061 +0000 UTC m=+448.167147457 I0601 19:30:29.014784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-znrt2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-znrt2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:29.015087 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-znrt2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:30:29.015078376 +0000 UTC m=+448.195834762 I0601 19:30:29.048719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-znrt2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-znrt2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:40.324425 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-01 19:30:40.324387798 +0000 UTC m=+459.505144204 I0601 19:30:40.324499 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:30:40.324544 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-01 19:30:40.324530381 +0000 UTC m=+459.505286807 I0601 19:30:40.349802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:40.349983 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-01 19:30:40.349972718 +0000 UTC m=+459.530729134 I0601 19:30:40.679579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:40.712227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z4n2w" condition "Approved" to 2026-06-01 19:30:40.712211567 +0000 UTC m=+459.892967963 I0601 19:30:40.734139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z4n2w" condition "Ready" to 2026-06-01 19:30:40.733979669 +0000 UTC m=+459.914736065 I0601 19:30:40.768574 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:30:40.768560001 +0000 UTC m=+459.949316397 I0601 19:30:40.791089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:40.791315 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:30:40.79131088 +0000 UTC m=+459.972067266 I0601 19:30:40.802868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:40.813455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:30:40.813815 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:30:40.813807495 +0000 UTC m=+459.994563891 I0601 19:34:03.966400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:34:03.966462 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-01 19:34:03.966454377 +0000 UTC m=+663.147210773 I0601 19:34:03.967201 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-01 19:34:03.967181488 +0000 UTC m=+663.147937904 I0601 19:34:03.987896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:34:03.987949 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-01 19:34:03.987943224 +0000 UTC m=+663.168699610 I0601 19:34:04.162599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:34:04.201904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xj7xh" condition "Approved" to 2026-06-01 19:34:04.201892533 +0000 UTC m=+663.382648939 I0601 19:34:04.218015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xj7xh" condition "Ready" to 2026-06-01 19:34:04.218004616 +0000 UTC m=+663.398761002 I0601 19:34:04.242007 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:34:04.241994743 +0000 UTC m=+663.422751129 I0601 19:34:04.262408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:34:46.405784 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-01 19:34:46.405771155 +0000 UTC m=+705.586527551 I0601 19:34:46.405912 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 19:34:46.405960 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-01 19:34:46.405955923 +0000 UTC m=+705.586712309 I0601 19:34:46.425753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:34:46.425848 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-01 19:34:46.425839938 +0000 UTC m=+705.606596334 I0601 19:34:46.645649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:34:46.701076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rhjlr" condition "Approved" to 2026-06-01 19:34:46.70106223 +0000 UTC m=+705.881818626 I0601 19:34:46.719690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rhjlr" condition "Ready" to 2026-06-01 19:34:46.719678067 +0000 UTC m=+705.900434453 I0601 19:34:46.749160 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:34:46.749141512 +0000 UTC m=+705.929897908 I0601 19:34:46.782381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 19:34:46.782722 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 19:34:46.782715545 +0000 UTC m=+705.963471941 I0601 19:34:46.803666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"