I0610 15:07:35.479517 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0610 15:07:35.479761 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0610 15:07:35.479893 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0610 15:07:35.484787 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0610 15:07:35.486084 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0610 15:07:35.486342 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0610 15:07:35.486455 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0610 15:07:35.489971 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0610 15:07:35.506072 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0610 15:07:35.506806 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0610 15:07:35.512335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0610 15:07:35.516500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0610 15:07:35.518100 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0610 15:07:35.518204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0610 15:07:35.523164 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0610 15:07:35.525018 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0610 15:07:35.526625 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0610 15:07:35.528283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0610 15:07:35.529994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0610 15:07:35.531738 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0610 15:07:35.531762 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0610 15:07:35.531818 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0610 15:07:35.533541 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0610 15:07:35.539112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0610 15:07:35.540864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0610 15:07:35.543316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0610 15:07:35.545090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0610 15:07:35.547573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0610 15:07:35.549014 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0610 15:07:35.549058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0610 15:07:35.551094 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0610 15:07:35.552932 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0610 15:07:35.553523 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0610 15:07:35.555917 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 15:07:35.556939 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 15:07:35.557790 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 15:07:35.558423 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 15:07:35.608139 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 15:07:35.615548 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 15:07:35.633342 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 15:07:35.639707 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 15:07:35.651163 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 15:07:35.665144 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 15:07:46.123032 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-10 15:07:46.123015349 +0000 UTC m=+10.678831442 I0610 15:07:46.916428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:07:46.916473 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-10 15:07:46.916463571 +0000 UTC m=+11.472279674 I0610 15:07:46.917508 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-10 15:07:46.917496618 +0000 UTC m=+11.473312741 E0610 15:07:46.931427 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 15:07:46.931467 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-10 15:07:46.931460669 +0000 UTC m=+11.487276742 E0610 15:07:46.931595 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 15:07:46.932041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:07:46.932105 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-10 15:07:46.932098459 +0000 UTC m=+11.487914532 E0610 15:07:46.946952 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0610 15:07:46.947209 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 15:07:46.947316 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 15:07:46.947417 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0610 15:07:46.957071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:07:46.976867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jxb75" condition "Approved" to 2026-06-10 15:07:46.976856288 +0000 UTC m=+11.532672361 I0610 15:07:46.990658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jxb75" condition "Ready" to 2026-06-10 15:07:46.990649368 +0000 UTC m=+11.546465421 I0610 15:07:47.014015 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:07:47.014002571 +0000 UTC m=+11.569818644 I0610 15:07:47.033202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:07:47.033614 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:07:47.033608067 +0000 UTC m=+11.589424140 I0610 15:07:47.049679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:07:47.050061 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:07:47.050053526 +0000 UTC m=+11.605869589 I0610 15:07:51.948082 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:07:51.948037339 +0000 UTC m=+16.503853442 I0610 15:08:14.448778 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-10 15:08:14.448761271 +0000 UTC m=+39.004577364 I0610 15:08:14.448772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:08:14.448849 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-10 15:08:14.448841882 +0000 UTC m=+39.004657945 I0610 15:08:14.462693 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-10 15:08:14.46268163 +0000 UTC m=+39.018497703 I0610 15:08:14.487429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:08:14.487489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:08:14.487544 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-10 15:08:14.487519767 +0000 UTC m=+39.043335840 I0610 15:08:14.696507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rd84g" condition "Approved" to 2026-06-10 15:08:14.696493914 +0000 UTC m=+39.252309987 I0610 15:08:14.726308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rd84g" condition "Ready" to 2026-06-10 15:08:14.726297039 +0000 UTC m=+39.282113122 I0610 15:08:14.755709 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:08:14.755697318 +0000 UTC m=+39.311513381 I0610 15:08:14.780076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:08:14.780515 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:08:14.780506705 +0000 UTC m=+39.336322788 I0610 15:08:14.804765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:12:13.842883 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-06-10 15:12:13.84284339 +0000 UTC m=+278.398659493 I0610 15:12:13.842976 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:12:13.843117 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-06-10 15:12:13.843085305 +0000 UTC m=+278.398901478 I0610 15:12:13.861665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:12:13.861978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:12:13.862089 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-06-10 15:12:13.862080315 +0000 UTC m=+278.417896408 I0610 15:12:14.222454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:12:14.234626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-5t2kk" condition "Approved" to 2026-06-10 15:12:14.234610367 +0000 UTC m=+278.790426430 I0610 15:12:14.260139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-5t2kk" condition "Ready" to 2026-06-10 15:12:14.260124136 +0000 UTC m=+278.815940209 I0610 15:12:14.284071 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:12:14.28405605 +0000 UTC m=+278.839872103 I0610 15:12:14.302194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:13:16.838345 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-10 15:13:16.838309954 +0000 UTC m=+341.394126027 I0610 15:13:16.838408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:13:16.838576 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-10 15:13:16.838570449 +0000 UTC m=+341.394386542 I0610 15:13:16.849834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:13:16.850126 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-10 15:13:16.850118433 +0000 UTC m=+341.405934526 E0610 15:13:16.850645 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 15:13:16.850682 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-10 15:13:16.850674564 +0000 UTC m=+341.406490637 E0610 15:13:16.850734 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 15:13:16.866150 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0610 15:13:16.866764 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 15:13:16.866803 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 15:13:16.866869 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0610 15:13:16.868230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:13:16.890163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kx9kw" condition "Approved" to 2026-06-10 15:13:16.890153186 +0000 UTC m=+341.445969259 I0610 15:13:16.901522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kx9kw" condition "Ready" to 2026-06-10 15:13:16.901505656 +0000 UTC m=+341.457321749 I0610 15:13:16.921927 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:13:16.921887954 +0000 UTC m=+341.477704047 I0610 15:13:16.936698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:13:16.937072 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:13:16.937062794 +0000 UTC m=+341.492878867 I0610 15:13:16.952636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:13:16.952879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:13:21.867602 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:13:21.867578847 +0000 UTC m=+346.423394940 I0610 15:14:01.816699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:14:01.816740 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-10 15:14:01.816735691 +0000 UTC m=+386.372551754 I0610 15:14:01.816948 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-10 15:14:01.816944785 +0000 UTC m=+386.372760858 I0610 15:14:01.830849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:14:01.830881 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-10 15:14:01.830875703 +0000 UTC m=+386.386691766 I0610 15:14:01.831176 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-10 15:14:01.831170988 +0000 UTC m=+386.386987061 I0610 15:14:01.851929 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-10 15:14:01.851920324 +0000 UTC m=+386.407736387 I0610 15:14:01.861460 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:14:01.861499 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-10 15:14:01.861492317 +0000 UTC m=+386.417308390 I0610 15:14:01.862010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:01.862080 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-10 15:14:01.862075557 +0000 UTC m=+386.417891620 I0610 15:14:01.870901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:01.870968 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-10 15:14:01.870960649 +0000 UTC m=+386.426776742 I0610 15:14:01.893504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:01.893547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:14:01.893562 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-10 15:14:01.893556726 +0000 UTC m=+386.449372789 I0610 15:14:02.056030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:02.063421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9r9c6" condition "Approved" to 2026-06-10 15:14:02.063406791 +0000 UTC m=+386.619222844 I0610 15:14:02.089019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9r9c6" condition "Ready" to 2026-06-10 15:14:02.089008688 +0000 UTC m=+386.644824751 I0610 15:14:02.104655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:02.114887 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:14:02.11487854 +0000 UTC m=+386.670694603 I0610 15:14:02.167221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pjjvl" condition "Approved" to 2026-06-10 15:14:02.167212315 +0000 UTC m=+386.723028378 I0610 15:14:02.167988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:02.186386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pjjvl" condition "Ready" to 2026-06-10 15:14:02.186376272 +0000 UTC m=+386.742192335 I0610 15:14:02.226788 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:14:02.226776872 +0000 UTC m=+386.782592955 E0610 15:14:02.302894 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-pkq8z\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0610 15:14:02.357377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:02.357646 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:14:02.357641708 +0000 UTC m=+386.913457771 I0610 15:14:02.560922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:02.708211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:02.758613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:02.919046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wsv5c" condition "Approved" to 2026-06-10 15:14:02.91903324 +0000 UTC m=+387.474849303 I0610 15:14:03.229311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wsv5c" condition "Ready" to 2026-06-10 15:14:03.229271975 +0000 UTC m=+387.785088078 I0610 15:14:03.460098 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:14:03.460075703 +0000 UTC m=+388.015891806 I0610 15:14:03.557625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:03.557955 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:14:03.557949983 +0000 UTC m=+388.113766036 I0610 15:14:03.759215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:09.853619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:14:09.853663 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" condition "Issuing" to 2026-06-10 15:14:09.853655251 +0000 UTC m=+394.409471324 I0610 15:14:09.854106 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" condition "Ready" to 2026-06-10 15:14:09.854097008 +0000 UTC m=+394.409913081 I0610 15:14:09.871932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:09.872023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:14:09.872044 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" condition "Issuing" to 2026-06-10 15:14:09.872038482 +0000 UTC m=+394.427854555 I0610 15:14:10.045237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:10.054762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-w7jsx-v9x8b" condition "Approved" to 2026-06-10 15:14:10.0547533 +0000 UTC m=+394.610569373 I0610 15:14:10.076137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-w7jsx-v9x8b" condition "Ready" to 2026-06-10 15:14:10.07612653 +0000 UTC m=+394.631942603 I0610 15:14:10.099177 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:14:10.0991605 +0000 UTC m=+394.654976583 I0610 15:14:10.118241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:10.118783 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:14:10.118775501 +0000 UTC m=+394.674591574 I0610 15:14:10.135122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w7jsx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:22.418752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-10 15:14:22.418712542 +0000 UTC m=+406.974528615 I0610 15:14:22.419266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:14:22.419296 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-10 15:14:22.419289203 +0000 UTC m=+406.975105266 I0610 15:14:22.435754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:22.435918 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-10 15:14:22.435908248 +0000 UTC m=+406.991724341 I0610 15:14:22.853586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:14:22.881638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rx4lv" condition "Approved" to 2026-06-10 15:14:22.881603767 +0000 UTC m=+407.437419840 I0610 15:14:22.898676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rx4lv" condition "Ready" to 2026-06-10 15:14:22.898665551 +0000 UTC m=+407.454481634 I0610 15:14:22.923321 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:14:22.923310419 +0000 UTC m=+407.479126502 I0610 15:14:22.942587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:17:37.596289 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-10 15:17:37.596274467 +0000 UTC m=+602.152090550 I0610 15:17:37.596325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:17:37.596361 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-10 15:17:37.596353268 +0000 UTC m=+602.152169341 I0610 15:17:37.620880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:17:37.620968 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-10 15:17:37.620960231 +0000 UTC m=+602.176776314 I0610 15:17:37.816914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:17:37.842515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fm6r8" condition "Approved" to 2026-06-10 15:17:37.842504354 +0000 UTC m=+602.398320427 I0610 15:17:37.860139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fm6r8" condition "Ready" to 2026-06-10 15:17:37.860128967 +0000 UTC m=+602.415945040 I0610 15:17:37.887064 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:17:37.887051374 +0000 UTC m=+602.442867447 I0610 15:17:37.908397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:18:17.817280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 15:18:17.817338 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-10 15:18:17.817330422 +0000 UTC m=+642.373146495 I0610 15:18:17.817632 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-10 15:18:17.817626936 +0000 UTC m=+642.373443009 I0610 15:18:17.836837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:18:17.836899 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-10 15:18:17.83689114 +0000 UTC m=+642.392707203 I0610 15:18:18.027991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:18:18.068436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qjpkc" condition "Approved" to 2026-06-10 15:18:18.068427446 +0000 UTC m=+642.624243509 I0610 15:18:18.085006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qjpkc" condition "Ready" to 2026-06-10 15:18:18.084997011 +0000 UTC m=+642.640813074 I0610 15:18:18.115114 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:18:18.115101199 +0000 UTC m=+642.670917262 I0610 15:18:18.139673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 15:18:18.140005 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 15:18:18.139999502 +0000 UTC m=+642.695815565 I0610 15:18:18.161319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"