I0605 23:25:54.806172 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0605 23:25:54.806292 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0605 23:25:54.806445 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0605 23:25:54.810576 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0605 23:25:54.811162 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0605 23:25:54.811192 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0605 23:25:54.811218 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0605 23:25:54.814449 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0605 23:25:54.831215 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0605 23:25:54.838106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0605 23:25:54.844154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0605 23:25:54.846576 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0605 23:25:54.849060 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0605 23:25:54.851404 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0605 23:25:54.853952 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0605 23:25:54.854044 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0605 23:25:54.856837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0605 23:25:54.863474 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0605 23:25:54.866666 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0605 23:25:54.868454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0605 23:25:54.870189 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0605 23:25:54.870213 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0605 23:25:54.870248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0605 23:25:54.872199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0605 23:25:54.874168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0605 23:25:54.879170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0605 23:25:54.879528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0605 23:25:54.879536 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0605 23:25:54.887274 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0605 23:25:54.887319 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0605 23:25:54.887333 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0605 23:25:54.887374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0605 23:25:54.892408 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0605 23:25:54.895386 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 23:25:54.895725 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 23:25:54.896137 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 23:25:54.896660 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 23:25:54.911864 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 23:25:54.927873 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 23:25:54.942736 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 23:25:54.955838 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 23:25:54.982880 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 23:25:54.985114 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0605 23:26:06.653552 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-05 23:26:06.653531953 +0000 UTC m=+11.891366666 I0605 23:26:07.451215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:26:07.451228 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-05 23:26:07.45120488 +0000 UTC m=+12.689039553 I0605 23:26:07.451402 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-05 23:26:07.451357735 +0000 UTC m=+12.689192428 I0605 23:26:07.471844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:26:07.472014 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-05 23:26:07.472003471 +0000 UTC m=+12.709838144 E0605 23:26:07.472199 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0605 23:26:07.472286 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-05 23:26:07.472279958 +0000 UTC m=+12.710114621 E0605 23:26:07.472323 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0605 23:26:07.485339 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0605 23:26:07.485442 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0605 23:26:07.485479 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0605 23:26:07.485509 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0605 23:26:07.490531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:26:07.510769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9q5lf" condition "Approved" to 2026-06-05 23:26:07.510756173 +0000 UTC m=+12.748590846 I0605 23:26:07.527791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9q5lf" condition "Ready" to 2026-06-05 23:26:07.527771579 +0000 UTC m=+12.765606282 I0605 23:26:07.550373 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:26:07.550351008 +0000 UTC m=+12.788185681 I0605 23:26:07.576750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:26:07.577106 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:26:07.577094832 +0000 UTC m=+12.814929505 I0605 23:26:07.583679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:26:07.598413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:26:12.486239 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:26:12.486220829 +0000 UTC m=+17.724055532 I0605 23:26:37.170115 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-05 23:26:37.170098597 +0000 UTC m=+42.407933260 I0605 23:26:37.170476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:26:37.170497 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-05 23:26:37.170493446 +0000 UTC m=+42.408328109 I0605 23:26:37.219982 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-05 23:26:37.219970667 +0000 UTC m=+42.457805330 I0605 23:26:37.239177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:26:37.239312 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-05 23:26:37.239290055 +0000 UTC m=+42.477124738 I0605 23:26:37.650932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:26:37.692189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pbqfl" condition "Approved" to 2026-06-05 23:26:37.69216601 +0000 UTC m=+42.930000713 I0605 23:26:37.728847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pbqfl" condition "Ready" to 2026-06-05 23:26:37.728832133 +0000 UTC m=+42.966666826 I0605 23:26:37.765809 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:26:37.765797243 +0000 UTC m=+43.003631916 I0605 23:26:37.787787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:26:37.856279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:30:58.133416 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-06-05 23:30:58.133366018 +0000 UTC m=+303.371200711 I0605 23:30:58.133927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:30:58.134026 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-06-05 23:30:58.134015964 +0000 UTC m=+303.371850657 I0605 23:30:58.153964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:30:58.154091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:30:58.154249 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-06-05 23:30:58.154240201 +0000 UTC m=+303.392074894 I0605 23:30:58.278686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-6x587" condition "Approved" to 2026-06-05 23:30:58.278675462 +0000 UTC m=+303.516510135 I0605 23:30:58.309740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-6x587" condition "Ready" to 2026-06-05 23:30:58.309723696 +0000 UTC m=+303.547558359 I0605 23:30:58.337725 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:30:58.337689184 +0000 UTC m=+303.575523857 I0605 23:30:58.360085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:30:58.360768 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:30:58.360757292 +0000 UTC m=+303.598591985 I0605 23:30:58.382501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:02.918556 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-05 23:32:02.918528793 +0000 UTC m=+368.156363496 I0605 23:32:02.918616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:32:02.918909 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-05 23:32:02.918690287 +0000 UTC m=+368.156524990 E0605 23:32:02.933301 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0605 23:32:02.933342 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-05 23:32:02.933334939 +0000 UTC m=+368.171169612 E0605 23:32:02.933577 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0605 23:32:02.936619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:02.936754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:32:02.936811 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-05 23:32:02.936800213 +0000 UTC m=+368.174634886 E0605 23:32:02.943567 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0605 23:32:02.943686 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0605 23:32:02.943722 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0605 23:32:02.944069 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0605 23:32:02.973751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:02.980490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mdnw9" condition "Approved" to 2026-06-05 23:32:02.980472435 +0000 UTC m=+368.218307108 I0605 23:32:02.993786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mdnw9" condition "Ready" to 2026-06-05 23:32:02.993772344 +0000 UTC m=+368.231607017 I0605 23:32:03.020289 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:03.020266502 +0000 UTC m=+368.258101175 I0605 23:32:03.038942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:03.039249 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:03.039225687 +0000 UTC m=+368.277060350 I0605 23:32:03.052157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:03.052669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:07.944020 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:07.944006965 +0000 UTC m=+373.181841658 I0605 23:32:49.645497 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-05 23:32:49.645466041 +0000 UTC m=+414.883300704 I0605 23:32:49.652819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:32:49.652914 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-05 23:32:49.652904327 +0000 UTC m=+414.890739000 I0605 23:32:49.656034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:32:49.656614 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-05 23:32:49.656600355 +0000 UTC m=+414.894435018 I0605 23:32:49.656919 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-05 23:32:49.656895962 +0000 UTC m=+414.894730625 I0605 23:32:49.659224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:32:49.659683 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-05 23:32:49.659674839 +0000 UTC m=+414.897509502 I0605 23:32:49.663301 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-05 23:32:49.663285415 +0000 UTC m=+414.901120098 I0605 23:32:49.816126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:49.816169 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-05 23:32:49.816164344 +0000 UTC m=+415.053999007 I0605 23:32:49.816553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:49.816579 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-05 23:32:49.816576094 +0000 UTC m=+415.054410757 I0605 23:32:49.819812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:49.819857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:32:49.819874 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-05 23:32:49.819868983 +0000 UTC m=+415.057703646 I0605 23:32:50.059139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:50.142931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wg7f8" condition "Approved" to 2026-06-05 23:32:50.142923192 +0000 UTC m=+415.380757855 I0605 23:32:50.173410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wg7f8" condition "Ready" to 2026-06-05 23:32:50.173389588 +0000 UTC m=+415.411224261 I0605 23:32:50.207739 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:50.207728165 +0000 UTC m=+415.445562828 I0605 23:32:50.226198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:50.237050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:50.237240 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:50.237234356 +0000 UTC m=+415.475069019 I0605 23:32:50.267820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:50.271857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jxnhf" condition "Approved" to 2026-06-05 23:32:50.271846571 +0000 UTC m=+415.509681234 I0605 23:32:50.322456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jxnhf" condition "Ready" to 2026-06-05 23:32:50.322441855 +0000 UTC m=+415.560276518 I0605 23:32:50.368100 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:50.368087082 +0000 UTC m=+415.605921745 I0605 23:32:50.392339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:50.535994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k4skr" condition "Approved" to 2026-06-05 23:32:50.535981447 +0000 UTC m=+415.773816120 I0605 23:32:50.786931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k4skr" condition "Ready" to 2026-06-05 23:32:50.78691467 +0000 UTC m=+416.024749373 I0605 23:32:51.254193 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-k4skr" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-svsr8" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0605 23:32:51.334562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0605 23:32:51.479184 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-svsr8\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0605 23:32:51.539499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-j68lt" condition "Approved" to 2026-06-05 23:32:51.53946846 +0000 UTC m=+416.777303163 I0605 23:32:51.796007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-j68lt" condition "Ready" to 2026-06-05 23:32:51.795985004 +0000 UTC m=+417.033819697 I0605 23:32:52.086523 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:52.086503347 +0000 UTC m=+417.324338050 I0605 23:32:52.189409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:52.189857 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:52.189846636 +0000 UTC m=+417.427681309 I0605 23:32:52.380384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:58.688869 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r824z-tls" condition "Ready" to 2026-06-05 23:32:58.688846253 +0000 UTC m=+423.926680916 I0605 23:32:58.689376 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r824z-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:32:58.689390 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r824z-tls" condition "Issuing" to 2026-06-05 23:32:58.689387416 +0000 UTC m=+423.927222079 I0605 23:32:58.709485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r824z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r824z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:58.709543 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r824z-tls" condition "Ready" to 2026-06-05 23:32:58.709536834 +0000 UTC m=+423.947371497 I0605 23:32:58.902974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r824z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r824z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:58.946716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-r824z-jfs67" condition "Approved" to 2026-06-05 23:32:58.946696921 +0000 UTC m=+424.184531584 I0605 23:32:58.961891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-r824z-jfs67" condition "Ready" to 2026-06-05 23:32:58.961875751 +0000 UTC m=+424.199710414 I0605 23:32:58.999666 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-r824z-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:58.99964115 +0000 UTC m=+424.237475843 I0605 23:32:59.031649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r824z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r824z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:59.031996 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-r824z-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:59.031987288 +0000 UTC m=+424.269821951 I0605 23:32:59.047508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r824z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r824z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:59.050917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r824z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r824z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:32:59.051379 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-r824z-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:32:59.051358049 +0000 UTC m=+424.289192722 I0605 23:33:12.694489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:33:12.694519 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-05 23:33:12.694510962 +0000 UTC m=+437.932345635 I0605 23:33:12.694656 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-05 23:33:12.694629844 +0000 UTC m=+437.932464517 I0605 23:33:12.707998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:33:12.708059 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-05 23:33:12.708054943 +0000 UTC m=+437.945889606 I0605 23:33:12.907394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:33:12.952185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bsmch" condition "Approved" to 2026-06-05 23:33:12.952160021 +0000 UTC m=+438.189994724 I0605 23:33:12.974360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bsmch" condition "Ready" to 2026-06-05 23:33:12.974346407 +0000 UTC m=+438.212181090 I0605 23:33:13.012160 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:33:13.012138212 +0000 UTC m=+438.249972885 I0605 23:33:13.035508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:33:13.082871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:36:28.721300 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-05 23:36:28.721277635 +0000 UTC m=+633.959112308 I0605 23:36:28.721603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:36:28.721840 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-05 23:36:28.721825038 +0000 UTC m=+633.959659791 I0605 23:36:28.739735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:36:28.739817 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-05 23:36:28.739808138 +0000 UTC m=+633.977642811 I0605 23:36:28.945478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:36:28.975541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wc7fq" condition "Approved" to 2026-06-05 23:36:28.975530479 +0000 UTC m=+634.213365142 I0605 23:36:28.995547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wc7fq" condition "Ready" to 2026-06-05 23:36:28.995527805 +0000 UTC m=+634.233362478 I0605 23:36:29.020660 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:36:29.020638901 +0000 UTC m=+634.258473574 I0605 23:36:29.044980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:37:12.976216 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-05 23:37:12.976194732 +0000 UTC m=+678.214029435 I0605 23:37:12.976501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0605 23:37:12.976568 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-05 23:37:12.976563201 +0000 UTC m=+678.214397874 I0605 23:37:13.003790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:37:13.003878 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-05 23:37:13.003867888 +0000 UTC m=+678.241702541 I0605 23:37:13.255484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0605 23:37:13.286628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-87lrj" condition "Approved" to 2026-06-05 23:37:13.286611217 +0000 UTC m=+678.524445880 I0605 23:37:13.307976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-87lrj" condition "Ready" to 2026-06-05 23:37:13.307958354 +0000 UTC m=+678.545793087 I0605 23:37:13.345027 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-05 23:37:13.345012178 +0000 UTC m=+678.582846851 I0605 23:37:13.366536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"