I0612 06:45:30.982387 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0612 06:45:30.982475 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0612 06:45:30.982519 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0612 06:45:30.984757 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0612 06:45:30.985022 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0612 06:45:30.985123 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0612 06:45:30.985129 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0612 06:45:30.987042 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0612 06:45:31.003526 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0612 06:45:31.003870 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0612 06:45:31.009575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0612 06:45:31.014960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0612 06:45:31.017118 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0612 06:45:31.018840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0612 06:45:31.021161 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0612 06:45:31.023641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0612 06:45:31.025322 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0612 06:45:31.027980 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0612 06:45:31.032264 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0612 06:45:31.032295 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0612 06:45:31.034649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0612 06:45:31.036965 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0612 06:45:31.039242 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0612 06:45:31.041086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0612 06:45:31.042699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0612 06:45:31.044476 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0612 06:45:31.044494 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0612 06:45:31.044503 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0612 06:45:31.044509 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0612 06:45:31.044560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0612 06:45:31.046343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0612 06:45:31.048135 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0612 06:45:31.053813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0612 06:45:31.057435 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 06:45:31.058482 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 06:45:31.058485 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 06:45:31.079730 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 06:45:31.093194 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 06:45:31.105927 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 06:45:31.140761 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 06:45:31.147978 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 06:45:31.160172 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 06:45:31.179518 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 06:45:47.650236 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-12 06:45:47.650202514 +0000 UTC m=+16.700392093 I0612 06:45:48.367875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:45:48.367913 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-12 06:45:48.367906853 +0000 UTC m=+17.418096402 I0612 06:45:48.368035 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-12 06:45:48.368017976 +0000 UTC m=+17.418207535 I0612 06:45:48.384989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:45:48.385089 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-12 06:45:48.385080699 +0000 UTC m=+17.435270249 E0612 06:45:48.386602 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 06:45:48.386678 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-12 06:45:48.386670799 +0000 UTC m=+17.436860348 E0612 06:45:48.386712 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 06:45:48.402750 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0612 06:45:48.402868 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 06:45:48.402924 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 06:45:48.402966 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0612 06:45:48.409102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:45:48.409176 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-12 06:45:48.409168092 +0000 UTC m=+17.459357631 I0612 06:45:48.411643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7drtt" condition "Approved" to 2026-06-12 06:45:48.411635569 +0000 UTC m=+17.461825118 I0612 06:45:48.420746 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-12 06:45:48.420735264 +0000 UTC m=+17.470924833 I0612 06:45:48.422586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7drtt" condition "Ready" to 2026-06-12 06:45:48.422573991 +0000 UTC m=+17.472763530 I0612 06:45:48.429971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:45:48.443019 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:45:48.443004269 +0000 UTC m=+17.493193838 I0612 06:45:48.456848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:45:48.457106 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:45:48.45710142 +0000 UTC m=+17.507290959 I0612 06:45:48.475015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:45:48.479787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:45:53.403469 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:45:53.403456267 +0000 UTC m=+22.453645816 I0612 06:46:17.131249 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-12 06:46:17.131240166 +0000 UTC m=+46.181429705 I0612 06:46:17.131494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:46:17.131628 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-12 06:46:17.131618596 +0000 UTC m=+46.181808175 I0612 06:46:17.160362 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-12 06:46:17.160350511 +0000 UTC m=+46.210540050 I0612 06:46:17.165905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:46:17.165954 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:46:17.166068 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-12 06:46:17.166062612 +0000 UTC m=+46.216252161 I0612 06:46:17.311346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:46:17.318469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jk4lx" condition "Approved" to 2026-06-12 06:46:17.318453515 +0000 UTC m=+46.368643054 I0612 06:46:17.349868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jk4lx" condition "Ready" to 2026-06-12 06:46:17.349846646 +0000 UTC m=+46.400036185 I0612 06:46:17.378591 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:46:17.378577242 +0000 UTC m=+46.428766791 I0612 06:46:17.396586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:46:17.396944 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:46:17.396939744 +0000 UTC m=+46.447129293 I0612 06:46:17.418523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:46:17.428925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:50:21.752087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:50:21.752130 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-06-12 06:50:21.752125278 +0000 UTC m=+290.802314817 I0612 06:50:21.752526 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-06-12 06:50:21.75252272 +0000 UTC m=+290.802712259 I0612 06:50:21.772221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:50:21.772315 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-06-12 06:50:21.772304831 +0000 UTC m=+290.822494400 I0612 06:50:21.974936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:50:22.001095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-plvq6" condition "Approved" to 2026-06-12 06:50:22.00108487 +0000 UTC m=+291.051274429 I0612 06:50:22.026305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-plvq6" condition "Ready" to 2026-06-12 06:50:22.026295283 +0000 UTC m=+291.076484832 I0612 06:50:22.054604 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:50:22.054591287 +0000 UTC m=+291.104780826 I0612 06:50:22.072150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:50:22.129875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:51:25.682592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:51:25.682593 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-12 06:51:25.682537199 +0000 UTC m=+354.732726758 I0612 06:51:25.682634 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-12 06:51:25.682625342 +0000 UTC m=+354.732814891 I0612 06:51:25.695645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:51:25.695897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:51:25.696000 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-12 06:51:25.69599035 +0000 UTC m=+354.746179919 E0612 06:51:25.698852 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 06:51:25.698894 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-12 06:51:25.698885685 +0000 UTC m=+354.749075234 E0612 06:51:25.698951 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 06:51:25.710275 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0612 06:51:25.710541 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 06:51:25.710709 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 06:51:25.710836 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0612 06:51:25.736178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xc6xw" condition "Approved" to 2026-06-12 06:51:25.736167994 +0000 UTC m=+354.786357533 I0612 06:51:25.736581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:51:25.748521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xc6xw" condition "Ready" to 2026-06-12 06:51:25.748509835 +0000 UTC m=+354.798699384 I0612 06:51:25.767336 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:51:25.767320214 +0000 UTC m=+354.817509773 I0612 06:51:25.783436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:51:25.784400 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:51:25.784387158 +0000 UTC m=+354.834576737 I0612 06:51:25.803318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:51:30.711439 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:51:30.711424758 +0000 UTC m=+359.761614337 I0612 06:52:10.413261 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-12 06:52:10.413249835 +0000 UTC m=+399.463439384 I0612 06:52:10.413508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:52:10.413567 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-12 06:52:10.413561802 +0000 UTC m=+399.463751341 I0612 06:52:10.427263 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-12 06:52:10.427254728 +0000 UTC m=+399.477444267 I0612 06:52:10.428561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:52:10.428815 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-12 06:52:10.428808834 +0000 UTC m=+399.478998373 I0612 06:52:10.483317 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-12 06:52:10.483306732 +0000 UTC m=+399.533496261 I0612 06:52:10.483562 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:52:10.483630 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-12 06:52:10.483625989 +0000 UTC m=+399.533815538 I0612 06:52:10.514373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:10.514786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:52:10.514908 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-12 06:52:10.514879601 +0000 UTC m=+399.565069160 I0612 06:52:10.527799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:10.527850 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-12 06:52:10.527843831 +0000 UTC m=+399.578033370 I0612 06:52:10.527811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:10.529759 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:52:10.529824 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-12 06:52:10.529817946 +0000 UTC m=+399.580007485 I0612 06:52:10.755989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tzcx5" condition "Approved" to 2026-06-12 06:52:10.755978428 +0000 UTC m=+399.806167977 I0612 06:52:10.775191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tzcx5" condition "Ready" to 2026-06-12 06:52:10.775176041 +0000 UTC m=+399.825365620 I0612 06:52:10.804812 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:52:10.804802245 +0000 UTC m=+399.854991794 I0612 06:52:10.831551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:10.831904 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:52:10.831895821 +0000 UTC m=+399.882085380 I0612 06:52:10.851438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:10.852047 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:52:10.852034646 +0000 UTC m=+399.902224225 I0612 06:52:10.856790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:10.886043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ldhw5" condition "Approved" to 2026-06-12 06:52:10.88603316 +0000 UTC m=+399.936222709 I0612 06:52:10.900250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ldhw5" condition "Ready" to 2026-06-12 06:52:10.900243079 +0000 UTC m=+399.950432628 I0612 06:52:10.955994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:52:10.956031 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-12 06:52:10.956024307 +0000 UTC m=+400.006213856 I0612 06:52:10.977058 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:52:10.977048912 +0000 UTC m=+400.027238461 I0612 06:52:11.083221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:11.237450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rkgqf" condition "Approved" to 2026-06-12 06:52:11.237437082 +0000 UTC m=+400.287626661 I0612 06:52:11.495688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rkgqf" condition "Ready" to 2026-06-12 06:52:11.49567827 +0000 UTC m=+400.545867819 E0612 06:52:11.728250 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-d6s2h\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0612 06:52:11.788744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wmrfb" condition "Approved" to 2026-06-12 06:52:11.788736791 +0000 UTC m=+400.838926330 I0612 06:52:12.047192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wmrfb" condition "Ready" to 2026-06-12 06:52:12.047182332 +0000 UTC m=+401.097371871 I0612 06:52:12.282556 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:52:12.28254232 +0000 UTC m=+401.332731869 I0612 06:52:12.531432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:12.531822 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:52:12.531813749 +0000 UTC m=+401.582003298 I0612 06:52:12.885402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:12.932704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:13.236673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:13.287210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:19.378582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:52:19.378626 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls" condition "Issuing" to 2026-06-12 06:52:19.378614937 +0000 UTC m=+408.428804506 I0612 06:52:19.378717 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls" condition "Ready" to 2026-06-12 06:52:19.378694458 +0000 UTC m=+408.428884037 I0612 06:52:19.397760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:19.403787 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls" condition "Ready" to 2026-06-12 06:52:19.403766736 +0000 UTC m=+408.453956315 I0612 06:52:19.522518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:19.557672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9f9hs-qqq74" condition "Approved" to 2026-06-12 06:52:19.557656247 +0000 UTC m=+408.607845796 I0612 06:52:19.579096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9f9hs-qqq74" condition "Ready" to 2026-06-12 06:52:19.579085631 +0000 UTC m=+408.629275190 I0612 06:52:19.609099 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:52:19.609081829 +0000 UTC m=+408.659271378 I0612 06:52:19.628688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9f9hs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:33.804191 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:52:33.806941 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-12 06:52:33.806930466 +0000 UTC m=+422.857120015 I0612 06:52:33.804461 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-12 06:52:33.804437532 +0000 UTC m=+422.854627121 I0612 06:52:33.822209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:33.822369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:52:33.822404 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-12 06:52:33.822398906 +0000 UTC m=+422.872588445 I0612 06:52:34.165720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:52:34.173659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hcdvm" condition "Approved" to 2026-06-12 06:52:34.173642439 +0000 UTC m=+423.223831988 I0612 06:52:34.196334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hcdvm" condition "Ready" to 2026-06-12 06:52:34.196323025 +0000 UTC m=+423.246512564 I0612 06:52:34.225235 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:52:34.225220199 +0000 UTC m=+423.275409738 I0612 06:52:34.247693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:55:41.179513 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:55:41.179628 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-12 06:55:41.179616449 +0000 UTC m=+610.229806018 I0612 06:55:41.180040 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-12 06:55:41.180013876 +0000 UTC m=+610.230203455 I0612 06:55:41.214388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 06:55:41.216014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 06:55:41.218609 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-12 06:55:41.218515161 +0000 UTC m=+610.268704720 I0612 06:55:41.515298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b48zs" condition "Approved" to 2026-06-12 06:55:41.515279552 +0000 UTC m=+610.565469121 I0612 06:55:41.534920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b48zs" condition "Ready" to 2026-06-12 06:55:41.534909906 +0000 UTC m=+610.585099455 I0612 06:55:41.562291 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 06:55:41.562276325 +0000 UTC m=+610.612465874 I0612 06:55:41.588528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"