I0611 06:40:16.079711 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0611 06:40:16.079929 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0611 06:40:16.080099 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0611 06:40:16.085057 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0611 06:40:16.085568 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0611 06:40:16.085836 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0611 06:40:16.085948 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0611 06:40:16.090557 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0611 06:40:16.109190 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0611 06:40:16.109520 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0611 06:40:16.114764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0611 06:40:16.119537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0611 06:40:16.121544 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0611 06:40:16.121597 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0611 06:40:16.121602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0611 06:40:16.126971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0611 06:40:16.130992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0611 06:40:16.134946 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0611 06:40:16.137446 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0611 06:40:16.139287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0611 06:40:16.141168 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0611 06:40:16.141194 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0611 06:40:16.141309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0611 06:40:16.143144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0611 06:40:16.147772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0611 06:40:16.152487 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0611 06:40:16.154863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0611 06:40:16.157382 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0611 06:40:16.157425 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0611 06:40:16.163585 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0611 06:40:16.165501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0611 06:40:16.168774 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0611 06:40:16.169958 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0611 06:40:16.172939 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:40:16.173286 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:40:16.174398 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:40:16.174478 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:40:16.195157 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:40:16.208713 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:40:16.223543 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:40:16.243727 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:40:16.261711 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:40:16.261777 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0611 06:40:29.757057 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-11 06:40:29.757044501 +0000 UTC m=+13.711171235 I0611 06:40:30.502007 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:40:30.502054 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-11 06:40:30.502046477 +0000 UTC m=+14.456173201 I0611 06:40:30.502246 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-11 06:40:30.502234347 +0000 UTC m=+14.456361081 E0611 06:40:30.559484 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0611 06:40:30.559527 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-11 06:40:30.559521526 +0000 UTC m=+14.513648250 E0611 06:40:30.559564 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0611 06:40:30.562990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:40:30.563058 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-11 06:40:30.563050874 +0000 UTC m=+14.517177608 E0611 06:40:30.696485 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0611 06:40:30.696679 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0611 06:40:30.696745 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0611 06:40:30.696982 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0611 06:40:30.744083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:40:30.820047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7q6zw" condition "Approved" to 2026-06-11 06:40:30.8200327 +0000 UTC m=+14.774159464 I0611 06:40:30.858082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7q6zw" condition "Ready" to 2026-06-11 06:40:30.858072841 +0000 UTC m=+14.812199575 I0611 06:40:30.889446 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:40:30.889438427 +0000 UTC m=+14.843565151 I0611 06:40:30.939412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:40:30.990481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:40:35.696962 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:40:35.696913431 +0000 UTC m=+19.651040165 I0611 06:41:07.360615 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-11 06:41:07.360519417 +0000 UTC m=+51.314646241 I0611 06:41:07.360876 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:41:07.361048 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-11 06:41:07.361038116 +0000 UTC m=+51.315164880 I0611 06:41:07.435601 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-11 06:41:07.435582284 +0000 UTC m=+51.389709018 I0611 06:41:07.436205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:41:07.436308 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-11 06:41:07.436299704 +0000 UTC m=+51.390426438 I0611 06:41:07.594280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:41:08.843317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dvsm4" condition "Approved" to 2026-06-11 06:41:08.843307169 +0000 UTC m=+52.797433903 I0611 06:41:09.482351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dvsm4" condition "Ready" to 2026-06-11 06:41:09.482335179 +0000 UTC m=+53.436461943 I0611 06:41:10.279001 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:41:10.27898671 +0000 UTC m=+54.233113444 I0611 06:41:10.413657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:41:10.559062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:47:27.182211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:47:27.182299 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-06-11 06:47:27.182266424 +0000 UTC m=+431.136393158 I0611 06:47:27.182299 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready" to 2026-06-11 06:47:27.182267664 +0000 UTC m=+431.136394418 I0611 06:47:27.203070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:47:27.203173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:47:27.203191 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-06-11 06:47:27.203183845 +0000 UTC m=+431.157310579 I0611 06:47:27.370121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:47:27.376221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-bs7nh" condition "Approved" to 2026-06-11 06:47:27.376211315 +0000 UTC m=+431.330338059 I0611 06:47:27.411700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-bs7nh" condition "Ready" to 2026-06-11 06:47:27.411686294 +0000 UTC m=+431.365813028 I0611 06:47:27.439392 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:47:27.439382562 +0000 UTC m=+431.393509286 I0611 06:47:27.463819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:48:33.388426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:48:33.388489 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-11 06:48:33.388455941 +0000 UTC m=+497.342582705 I0611 06:48:33.388968 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-11 06:48:33.388960236 +0000 UTC m=+497.343086990 E0611 06:48:33.421256 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0611 06:48:33.421301 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-11 06:48:33.421290901 +0000 UTC m=+497.375417655 E0611 06:48:33.421371 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0611 06:48:33.426962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:48:33.427146 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-11 06:48:33.427082718 +0000 UTC m=+497.381209482 E0611 06:48:33.465020 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0611 06:48:33.465412 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0611 06:48:33.465456 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0611 06:48:33.465709 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0611 06:48:33.519068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:48:33.546331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q2wgq" condition "Approved" to 2026-06-11 06:48:33.546321209 +0000 UTC m=+497.500447943 I0611 06:48:33.560265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q2wgq" condition "Ready" to 2026-06-11 06:48:33.560252205 +0000 UTC m=+497.514378949 I0611 06:48:33.592143 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:48:33.592129268 +0000 UTC m=+497.546256002 I0611 06:48:33.609910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:48:38.465616 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:48:38.465601063 +0000 UTC m=+502.419727827 I0611 06:49:24.864186 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-11 06:49:24.864144678 +0000 UTC m=+548.818271412 I0611 06:49:24.864716 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:49:24.874844 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-11 06:49:24.874828449 +0000 UTC m=+548.828955173 I0611 06:49:24.864754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:49:24.877106 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-11 06:49:24.877097222 +0000 UTC m=+548.831223946 I0611 06:49:24.865088 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-11 06:49:24.865069314 +0000 UTC m=+548.819196058 I0611 06:49:24.883733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:49:24.883748 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-11 06:49:24.883734452 +0000 UTC m=+548.837861166 I0611 06:49:24.883968 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-11 06:49:24.883960073 +0000 UTC m=+548.838086807 I0611 06:49:24.939826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:24.940197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:24.940607 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:49:24.940702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:49:24.940744 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-11 06:49:24.940738542 +0000 UTC m=+548.894865266 I0611 06:49:24.940639 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-11 06:49:24.940632987 +0000 UTC m=+548.894759721 I0611 06:49:24.949982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:24.950054 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-11 06:49:24.950047255 +0000 UTC m=+548.904173979 I0611 06:49:25.168554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:25.444555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bgl45" condition "Approved" to 2026-06-11 06:49:25.444545487 +0000 UTC m=+549.398672221 I0611 06:49:25.536757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:25.540562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zlsbf" condition "Approved" to 2026-06-11 06:49:25.540549638 +0000 UTC m=+549.494676372 I0611 06:49:25.541788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bgl45" condition "Ready" to 2026-06-11 06:49:25.541778849 +0000 UTC m=+549.495905583 I0611 06:49:25.543095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lf49m" condition "Approved" to 2026-06-11 06:49:25.543073033 +0000 UTC m=+549.497199767 I0611 06:49:25.702613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lf49m" condition "Ready" to 2026-06-11 06:49:25.702603401 +0000 UTC m=+549.656730125 I0611 06:49:25.702638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zlsbf" condition "Ready" to 2026-06-11 06:49:25.702626582 +0000 UTC m=+549.656753306 I0611 06:49:25.827231 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:49:25.827214554 +0000 UTC m=+549.781341288 I0611 06:49:25.867802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:25.868274 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:49:25.868263564 +0000 UTC m=+549.822390298 I0611 06:49:25.869573 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:49:25.869565758 +0000 UTC m=+549.823692492 I0611 06:49:25.999824 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:49:25.99981325 +0000 UTC m=+549.953939984 I0611 06:49:26.000436 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:49:26.000430562 +0000 UTC m=+549.954557316 I0611 06:49:26.180766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:26.199671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:26.201257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:26.203566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:26.245543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:26.245979 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:49:26.245971361 +0000 UTC m=+550.200098095 I0611 06:49:26.595829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:47.793262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:49:47.793320 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls" condition "Issuing" to 2026-06-11 06:49:47.793311557 +0000 UTC m=+571.747438321 I0611 06:49:47.793257 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls" condition "Ready" to 2026-06-11 06:49:47.793220352 +0000 UTC m=+571.747347086 I0611 06:49:47.873835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:47.874008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:49:47.874071 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls" condition "Issuing" to 2026-06-11 06:49:47.874061838 +0000 UTC m=+571.828188602 I0611 06:49:48.460267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m9t6m-5qc6g" condition "Approved" to 2026-06-11 06:49:48.460253458 +0000 UTC m=+572.414380212 I0611 06:49:48.525321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:49:49.093718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m9t6m-5qc6g" condition "Ready" to 2026-06-11 06:49:49.093700171 +0000 UTC m=+573.047826935 I0611 06:49:49.222149 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:49:49.222138477 +0000 UTC m=+573.176265201 I0611 06:49:49.404552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m9t6m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:50:25.276653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:50:25.276683 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-11 06:50:25.276673711 +0000 UTC m=+609.230800435 I0611 06:50:25.276995 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-11 06:50:25.276991148 +0000 UTC m=+609.231117872 I0611 06:50:25.302106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:50:25.302172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:50:25.302190 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-11 06:50:25.302183555 +0000 UTC m=+609.256310299 I0611 06:50:25.737207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cblkq" condition "Approved" to 2026-06-11 06:50:25.737198375 +0000 UTC m=+609.691325089 I0611 06:50:25.778085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cblkq" condition "Ready" to 2026-06-11 06:50:25.778068364 +0000 UTC m=+609.732195118 I0611 06:50:25.866257 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:50:25.86624465 +0000 UTC m=+609.820371384 I0611 06:50:26.067946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:50:26.068825 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:50:26.068814573 +0000 UTC m=+610.022941337 I0611 06:50:26.601931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:50:26.606625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:53:50.256093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:53:50.256162 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-11 06:53:50.25614909 +0000 UTC m=+814.210275834 I0611 06:53:50.256609 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-11 06:53:50.256604386 +0000 UTC m=+814.210731110 I0611 06:53:50.286865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:53:50.286938 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-11 06:53:50.286933958 +0000 UTC m=+814.241060682 I0611 06:53:50.470940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:53:50.505073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m6ztj" condition "Approved" to 2026-06-11 06:53:50.505059234 +0000 UTC m=+814.459185968 I0611 06:53:50.538999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m6ztj" condition "Ready" to 2026-06-11 06:53:50.538990622 +0000 UTC m=+814.493117346 I0611 06:53:50.606204 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:53:50.60618715 +0000 UTC m=+814.560313894 I0611 06:53:50.637523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:53:50.638149 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:53:50.638138572 +0000 UTC m=+814.592265336 I0611 06:53:50.720824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:54:51.587286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0611 06:54:51.587355 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-11 06:54:51.587327075 +0000 UTC m=+875.541453799 I0611 06:54:51.587565 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-11 06:54:51.587554719 +0000 UTC m=+875.541681473 I0611 06:54:51.605080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:54:51.605176 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-11 06:54:51.605166429 +0000 UTC m=+875.559293193 I0611 06:54:51.899388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:54:51.941146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bvpzm" condition "Approved" to 2026-06-11 06:54:51.941135271 +0000 UTC m=+875.895261995 I0611 06:54:51.968940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bvpzm" condition "Ready" to 2026-06-11 06:54:51.968929444 +0000 UTC m=+875.923056168 I0611 06:54:51.999679 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:54:51.999668286 +0000 UTC m=+875.953795020 I0611 06:54:52.026035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0611 06:54:52.026542 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-11 06:54:52.026532533 +0000 UTC m=+875.980659287 I0611 06:54:52.050658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"