I0610 09:25:17.674170 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0610 09:25:17.674370 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0610 09:25:17.674498 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0610 09:25:17.680434 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0610 09:25:17.680946 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0610 09:25:17.681736 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0610 09:25:17.681767 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0610 09:25:17.685233 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0610 09:25:17.703570 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0610 09:25:17.707550 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0610 09:25:17.709617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0610 09:25:17.711739 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0610 09:25:17.711758 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0610 09:25:17.711870 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0610 09:25:17.715810 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0610 09:25:17.719713 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0610 09:25:17.719779 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0610 09:25:17.719875 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0610 09:25:17.725004 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0610 09:25:17.729282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0610 09:25:17.733286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0610 09:25:17.736804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0610 09:25:17.738693 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0610 09:25:17.738779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0610 09:25:17.744046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0610 09:25:17.748639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0610 09:25:17.751361 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0610 09:25:17.753924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0610 09:25:17.756565 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0610 09:25:17.756600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0610 09:25:17.759853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0610 09:25:17.762506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0610 09:25:17.766076 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0610 09:25:17.769232 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 09:25:17.770612 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 09:25:17.771895 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 09:25:17.790567 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 09:25:17.803649 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 09:25:17.819006 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 09:25:17.835166 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 09:25:17.852599 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 09:25:17.865718 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 09:25:17.867960 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 09:25:30.637464 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-10 09:25:30.63744244 +0000 UTC m=+13.001144872 I0610 09:25:31.425702 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-10 09:25:31.425685557 +0000 UTC m=+13.789388019 I0610 09:25:31.426275 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:25:31.426686 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-10 09:25:31.426667811 +0000 UTC m=+13.790370263 E0610 09:25:31.441966 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 09:25:31.442055 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-10 09:25:31.442044206 +0000 UTC m=+13.805746638 E0610 09:25:31.442082 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 09:25:31.446101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:25:31.446517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:25:31.446576 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-10 09:25:31.446567842 +0000 UTC m=+13.810270274 E0610 09:25:31.454413 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0610 09:25:31.456715 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 09:25:31.456875 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 09:25:31.457012 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0610 09:25:31.489671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:25:31.493923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8285j" condition "Approved" to 2026-06-10 09:25:31.493903785 +0000 UTC m=+13.857606237 I0610 09:25:31.506815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8285j" condition "Ready" to 2026-06-10 09:25:31.506796156 +0000 UTC m=+13.870498588 I0610 09:25:31.535498 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:25:31.535485481 +0000 UTC m=+13.899187913 I0610 09:25:31.552478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:25:31.599605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:25:36.457084 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:25:36.457044821 +0000 UTC m=+18.820747283 I0610 09:26:00.081278 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-10 09:26:00.08115738 +0000 UTC m=+42.444859842 I0610 09:26:00.081353 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:26:00.081810 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-10 09:26:00.081798532 +0000 UTC m=+42.445500964 I0610 09:26:00.125670 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-10 09:26:00.11574363 +0000 UTC m=+42.479446052 I0610 09:26:00.126361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:26:00.126420 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:26:00.126444 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-10 09:26:00.126440612 +0000 UTC m=+42.490143024 I0610 09:26:00.427927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:26:00.428570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tvgmr" condition "Approved" to 2026-06-10 09:26:00.428558462 +0000 UTC m=+42.792260934 I0610 09:26:00.469986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tvgmr" condition "Ready" to 2026-06-10 09:26:00.469968967 +0000 UTC m=+42.833671399 I0610 09:26:00.512736 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:26:00.512723938 +0000 UTC m=+42.876426350 I0610 09:26:00.533393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:26:00.534473 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:26:00.534458392 +0000 UTC m=+42.898160814 I0610 09:26:00.572032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:30:15.441908 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:30:15.441999 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-06-10 09:30:15.441990317 +0000 UTC m=+297.805692749 I0610 09:30:15.442052 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-06-10 09:30:15.442002728 +0000 UTC m=+297.805705170 I0610 09:30:15.460076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:30:15.460218 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-06-10 09:30:15.460189078 +0000 UTC m=+297.823891510 I0610 09:30:15.777302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:30:15.813103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-pf6cb" condition "Approved" to 2026-06-10 09:30:15.813090167 +0000 UTC m=+298.176792599 I0610 09:30:15.855386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-pf6cb" condition "Ready" to 2026-06-10 09:30:15.855370813 +0000 UTC m=+298.219073245 I0610 09:30:15.889350 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:30:15.889329099 +0000 UTC m=+298.253031521 I0610 09:30:15.922656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:30:15.923301 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:30:15.923290915 +0000 UTC m=+298.286993347 I0610 09:30:15.940178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:30:15.940702 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:30:15.9406907 +0000 UTC m=+298.304393162 I0610 09:31:21.206067 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-10 09:31:21.205999457 +0000 UTC m=+363.569701919 I0610 09:31:21.206171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:31:21.206238 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-10 09:31:21.206221051 +0000 UTC m=+363.569923523 E0610 09:31:21.229640 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 09:31:21.229710 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-10 09:31:21.229702435 +0000 UTC m=+363.593404867 E0610 09:31:21.229736 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 09:31:21.233787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:31:21.233879 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-10 09:31:21.233869559 +0000 UTC m=+363.597572021 E0610 09:31:21.242599 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0610 09:31:21.242672 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 09:31:21.242694 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 09:31:21.242723 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0610 09:31:21.248372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:31:21.248540 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-10 09:31:21.248530395 +0000 UTC m=+363.612232817 I0610 09:31:21.252712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:31:21.254398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2fgf2" condition "Approved" to 2026-06-10 09:31:21.254386226 +0000 UTC m=+363.618088658 I0610 09:31:21.266809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2fgf2" condition "Ready" to 2026-06-10 09:31:21.266798808 +0000 UTC m=+363.630501240 I0610 09:31:21.284964 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:31:21.284947199 +0000 UTC m=+363.648649631 I0610 09:31:21.306708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:31:21.355407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:31:26.243598 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:31:26.243582796 +0000 UTC m=+368.607285248 I0610 09:32:09.738408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:32:09.738479 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-10 09:32:09.738471959 +0000 UTC m=+412.102174381 I0610 09:32:09.738893 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-10 09:32:09.738878394 +0000 UTC m=+412.102580806 I0610 09:32:09.745863 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:32:09.745895 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-10 09:32:09.745888705 +0000 UTC m=+412.109591137 I0610 09:32:09.746142 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-10 09:32:09.746137748 +0000 UTC m=+412.109840180 I0610 09:32:09.769693 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-10 09:32:09.769678913 +0000 UTC m=+412.133381335 I0610 09:32:09.771260 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:32:09.771281 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-10 09:32:09.771278246 +0000 UTC m=+412.134980668 I0610 09:32:09.821601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:09.821670 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-10 09:32:09.821661944 +0000 UTC m=+412.185364356 I0610 09:32:09.821977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:09.822064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:32:09.822102 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-10 09:32:09.82209367 +0000 UTC m=+412.185796092 I0610 09:32:09.827966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:09.828011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:32:09.828030 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-10 09:32:09.828026245 +0000 UTC m=+412.191728667 I0610 09:32:10.051962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tczb5" condition "Approved" to 2026-06-10 09:32:10.051947623 +0000 UTC m=+412.415650045 I0610 09:32:10.070242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tczb5" condition "Ready" to 2026-06-10 09:32:10.070229292 +0000 UTC m=+412.433931704 I0610 09:32:10.111419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:10.116064 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:32:10.116049885 +0000 UTC m=+412.479752327 I0610 09:32:10.148073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:10.150673 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:32:10.150666497 +0000 UTC m=+412.514368909 I0610 09:32:10.156621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gmhqx" condition "Approved" to 2026-06-10 09:32:10.156601501 +0000 UTC m=+412.520303933 I0610 09:32:10.181489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:10.182945 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:32:10.182937166 +0000 UTC m=+412.546639588 I0610 09:32:10.183540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:10.186622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:10.197400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gmhqx" condition "Ready" to 2026-06-10 09:32:10.197384631 +0000 UTC m=+412.561087053 I0610 09:32:10.199304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jt2lx" condition "Approved" to 2026-06-10 09:32:10.199297568 +0000 UTC m=+412.562999980 I0610 09:32:10.387077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jt2lx" condition "Ready" to 2026-06-10 09:32:10.387061378 +0000 UTC m=+412.750763810 I0610 09:32:10.634233 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:32:10.634209934 +0000 UTC m=+412.997912356 I0610 09:32:10.879099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:10.879620 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:32:10.879610284 +0000 UTC m=+413.243312716 I0610 09:32:11.002470 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:32:11.002458651 +0000 UTC m=+413.366161073 I0610 09:32:11.233234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:11.234377 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:32:11.234366805 +0000 UTC m=+413.598069257 I0610 09:32:11.277310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:11.529806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:18.186845 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" condition "Ready" to 2026-06-10 09:32:18.186804985 +0000 UTC m=+420.550507437 I0610 09:32:18.187153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:32:18.187194 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" condition "Issuing" to 2026-06-10 09:32:18.187188341 +0000 UTC m=+420.550890783 I0610 09:32:18.210181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z29q4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:18.210289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:32:18.210314 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" condition "Issuing" to 2026-06-10 09:32:18.210308415 +0000 UTC m=+420.574010837 I0610 09:32:18.638108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-z29q4-j4nvx" condition "Approved" to 2026-06-10 09:32:18.63809009 +0000 UTC m=+421.001792512 I0610 09:32:18.667394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-z29q4-j4nvx" condition "Ready" to 2026-06-10 09:32:18.667376032 +0000 UTC m=+421.031078454 I0610 09:32:18.712730 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:32:18.712713829 +0000 UTC m=+421.076416261 I0610 09:32:18.740607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z29q4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:18.741107 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:32:18.741097949 +0000 UTC m=+421.104800371 I0610 09:32:18.774392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z29q4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:18.811278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z29q4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z29q4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:31.343261 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-10 09:32:31.343207096 +0000 UTC m=+433.706909518 I0610 09:32:31.343755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:32:31.343862 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-10 09:32:31.343816394 +0000 UTC m=+433.707518806 I0610 09:32:31.358625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:32:31.358820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:32:31.358866 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-10 09:32:31.358841752 +0000 UTC m=+433.722544174 I0610 09:32:31.545919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hkmfj" condition "Approved" to 2026-06-10 09:32:31.545889456 +0000 UTC m=+433.909591888 I0610 09:32:31.568224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hkmfj" condition "Ready" to 2026-06-10 09:32:31.568210174 +0000 UTC m=+433.931912606 I0610 09:32:31.608690 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:32:31.608671694 +0000 UTC m=+433.972374156 I0610 09:32:31.629065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:35:49.799446 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-10 09:35:49.799416804 +0000 UTC m=+632.163119236 I0610 09:35:49.800082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:35:49.800108 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-10 09:35:49.800103593 +0000 UTC m=+632.163806025 I0610 09:35:49.819862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:35:49.819953 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-10 09:35:49.819942331 +0000 UTC m=+632.183644773 I0610 09:35:50.035332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:35:50.081687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zl88b" condition "Approved" to 2026-06-10 09:35:50.08167407 +0000 UTC m=+632.445376492 I0610 09:35:50.103978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zl88b" condition "Ready" to 2026-06-10 09:35:50.103961358 +0000 UTC m=+632.467663820 I0610 09:35:50.148100 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:35:50.148085599 +0000 UTC m=+632.511788021 I0610 09:35:50.171810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:35:50.172190 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:35:50.172182208 +0000 UTC m=+632.535884640 I0610 09:35:50.199591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:35:50.199768 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:35:50.19976182 +0000 UTC m=+632.563464242 I0610 09:36:32.978588 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-10 09:36:32.978573138 +0000 UTC m=+675.342275570 I0610 09:36:32.978630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:36:32.978830 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-10 09:36:32.978820841 +0000 UTC m=+675.342523293 I0610 09:36:33.006046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 09:36:33.006109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 09:36:33.006126 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-10 09:36:33.006119936 +0000 UTC m=+675.369822368 I0610 09:36:33.280488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gpq94" condition "Approved" to 2026-06-10 09:36:33.280477658 +0000 UTC m=+675.644180080 I0610 09:36:33.301518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gpq94" condition "Ready" to 2026-06-10 09:36:33.301503498 +0000 UTC m=+675.665205950 I0610 09:36:33.331308 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 09:36:33.331284702 +0000 UTC m=+675.694987164 I0610 09:36:33.362070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"