I0603 07:24:01.057489 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0603 07:24:01.057642 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0603 07:24:01.057734 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0603 07:24:01.064659 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0603 07:24:01.065282 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0603 07:24:01.065300 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0603 07:24:01.065451 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0603 07:24:01.072060 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0603 07:24:01.085241 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0603 07:24:01.088754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0603 07:24:01.091331 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0603 07:24:01.094565 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0603 07:24:01.100460 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0603 07:24:01.103563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0603 07:24:01.106520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0603 07:24:01.108756 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0603 07:24:01.108784 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0603 07:24:01.108794 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0603 07:24:01.108805 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0603 07:24:01.108815 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0603 07:24:01.108867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0603 07:24:01.111348 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0603 07:24:01.113579 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0603 07:24:01.115443 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0603 07:24:01.117869 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0603 07:24:01.123121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0603 07:24:01.127143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0603 07:24:01.129952 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0603 07:24:01.132248 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0603 07:24:01.132341 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0603 07:24:01.135052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0603 07:24:01.137734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0603 07:24:01.140652 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0603 07:24:01.143955 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0603 07:24:01.145079 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0603 07:24:01.145333 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0603 07:24:01.170430 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0603 07:24:01.182237 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0603 07:24:01.199085 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0603 07:24:01.219034 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0603 07:24:01.233516 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0603 07:24:01.248283 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0603 07:24:01.249207 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0603 07:24:14.959490 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-03 07:24:14.959456982 +0000 UTC m=+13.935250529 I0603 07:24:15.652147 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-03 07:24:15.652130879 +0000 UTC m=+14.627924416 I0603 07:24:15.652478 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:24:15.652528 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-03 07:24:15.652517198 +0000 UTC m=+14.628310736 E0603 07:24:15.670457 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0603 07:24:15.670516 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-03 07:24:15.670510005 +0000 UTC m=+14.646303522 E0603 07:24:15.670536 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0603 07:24:15.672550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:24:15.672730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:24:15.672753 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-03 07:24:15.672747599 +0000 UTC m=+14.648541116 E0603 07:24:15.686335 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0603 07:24:15.686501 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0603 07:24:15.686645 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0603 07:24:15.686822 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0603 07:24:15.714814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:24:15.715627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-brfdr" condition "Approved" to 2026-06-03 07:24:15.715618977 +0000 UTC m=+14.691412494 I0603 07:24:15.727058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-brfdr" condition "Ready" to 2026-06-03 07:24:15.727051439 +0000 UTC m=+14.702844956 I0603 07:24:15.751279 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:24:15.751264074 +0000 UTC m=+14.727057591 I0603 07:24:15.764204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:24:15.764472 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:24:15.764466138 +0000 UTC m=+14.740259655 I0603 07:24:15.778398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:24:20.687549 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:24:20.687514129 +0000 UTC m=+19.663307676 I0603 07:24:44.005804 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-03 07:24:44.005756515 +0000 UTC m=+42.981550062 I0603 07:24:44.006281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:24:44.006370 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-03 07:24:44.006359156 +0000 UTC m=+42.982152673 I0603 07:24:44.027548 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-03 07:24:44.027535624 +0000 UTC m=+43.003329141 I0603 07:24:44.039753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:24:44.039837 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-03 07:24:44.03983101 +0000 UTC m=+43.015624517 I0603 07:24:44.165696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:24:44.198776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gmfh6" condition "Approved" to 2026-06-03 07:24:44.198764267 +0000 UTC m=+43.174557784 I0603 07:24:44.236204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gmfh6" condition "Ready" to 2026-06-03 07:24:44.236188516 +0000 UTC m=+43.211982063 I0603 07:24:44.273228 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:24:44.273213208 +0000 UTC m=+43.249006755 I0603 07:24:44.298389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:24:44.373992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:29:03.225868 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-06-03 07:29:03.225829798 +0000 UTC m=+302.201623295 I0603 07:29:03.226468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:29:03.226516 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-06-03 07:29:03.226510107 +0000 UTC m=+302.202303604 I0603 07:29:03.252183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:29:03.252268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:29:03.252498 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-06-03 07:29:03.252484124 +0000 UTC m=+302.228277671 I0603 07:29:03.392687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:29:03.402110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-bmp4l" condition "Approved" to 2026-06-03 07:29:03.402097997 +0000 UTC m=+302.377891534 I0603 07:29:03.428624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-bmp4l" condition "Ready" to 2026-06-03 07:29:03.428610969 +0000 UTC m=+302.404404516 I0603 07:29:03.460771 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:29:03.460756944 +0000 UTC m=+302.436550491 I0603 07:29:03.478681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:29:03.479157 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:29:03.479150246 +0000 UTC m=+302.454943753 I0603 07:29:03.500093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:09.603684 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-03 07:30:09.60365338 +0000 UTC m=+368.579446917 I0603 07:30:09.603830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:30:09.603876 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-03 07:30:09.603865204 +0000 UTC m=+368.579658741 E0603 07:30:09.616036 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0603 07:30:09.616077 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-03 07:30:09.616070364 +0000 UTC m=+368.591863871 E0603 07:30:09.616117 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0603 07:30:09.627314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:09.627487 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-03 07:30:09.627478627 +0000 UTC m=+368.603272154 E0603 07:30:09.627542 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0603 07:30:09.628707 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0603 07:30:09.628761 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0603 07:30:09.628805 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0603 07:30:09.638002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:09.638096 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-03 07:30:09.638084272 +0000 UTC m=+368.613877879 I0603 07:30:09.643846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-w2tlb" condition "Approved" to 2026-06-03 07:30:09.64383655 +0000 UTC m=+368.619630057 I0603 07:30:09.650077 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-03 07:30:09.650067898 +0000 UTC m=+368.625861405 I0603 07:30:09.656795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:09.657223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-w2tlb" condition "Ready" to 2026-06-03 07:30:09.657203616 +0000 UTC m=+368.632997133 I0603 07:30:09.674994 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:30:09.674982099 +0000 UTC m=+368.650775606 I0603 07:30:09.689228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:09.729501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:14.629341 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:30:14.629327042 +0000 UTC m=+373.605120579 I0603 07:30:56.616334 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-03 07:30:56.61628663 +0000 UTC m=+415.592080137 I0603 07:30:56.616604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:30:56.616623 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-03 07:30:56.616620196 +0000 UTC m=+415.592413703 I0603 07:30:56.629870 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-03 07:30:56.629858069 +0000 UTC m=+415.605651576 I0603 07:30:56.630168 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:30:56.630565 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-03 07:30:56.630199836 +0000 UTC m=+415.605993343 I0603 07:30:56.639572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:56.639785 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-03 07:30:56.639778985 +0000 UTC m=+415.615572492 I0603 07:30:56.639886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:30:56.639897 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-03 07:30:56.639895208 +0000 UTC m=+415.615688715 I0603 07:30:56.640278 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-03 07:30:56.640269186 +0000 UTC m=+415.616062703 I0603 07:30:56.655600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:56.655687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:30:56.655716 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-03 07:30:56.655710462 +0000 UTC m=+415.631503959 I0603 07:30:56.699153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:56.699246 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-03 07:30:56.699239796 +0000 UTC m=+415.675033303 I0603 07:30:56.830050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:56.860726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5ljsf" condition "Approved" to 2026-06-03 07:30:56.86071263 +0000 UTC m=+415.836506147 I0603 07:30:56.897537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5ljsf" condition "Ready" to 2026-06-03 07:30:56.89752562 +0000 UTC m=+415.873319137 I0603 07:30:56.898215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:56.907689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8kvd2" condition "Approved" to 2026-06-03 07:30:56.907681822 +0000 UTC m=+415.883475319 I0603 07:30:56.930442 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:30:56.930429354 +0000 UTC m=+415.906222871 I0603 07:30:56.931190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8kvd2" condition "Ready" to 2026-06-03 07:30:56.931177378 +0000 UTC m=+415.906970885 I0603 07:30:56.965399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:56.975023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:56.975229 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:30:56.975224693 +0000 UTC m=+415.951018200 I0603 07:30:57.013337 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:30:57.013322669 +0000 UTC m=+415.989116186 I0603 07:30:57.103967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:57.156193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ztbts" condition "Approved" to 2026-06-03 07:30:57.156170368 +0000 UTC m=+416.131963915 I0603 07:30:57.245766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:57.247065 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:30:57.246997996 +0000 UTC m=+416.222791533 I0603 07:30:57.408791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ztbts" condition "Ready" to 2026-06-03 07:30:57.40878073 +0000 UTC m=+416.384574247 I0603 07:30:57.994826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:58.048941 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:30:58.048926346 +0000 UTC m=+417.024719863 I0603 07:30:58.195535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:58.195893 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:30:58.195886031 +0000 UTC m=+417.171679548 I0603 07:30:58.447378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:30:58.497686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:31:04.569968 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n7bfr-tls" condition "Ready" to 2026-06-03 07:31:04.569950728 +0000 UTC m=+423.545744265 I0603 07:31:04.570575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n7bfr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:31:04.570605 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n7bfr-tls" condition "Issuing" to 2026-06-03 07:31:04.57059799 +0000 UTC m=+423.546391537 I0603 07:31:04.583100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n7bfr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n7bfr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:31:04.583168 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n7bfr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:31:04.583183 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n7bfr-tls" condition "Issuing" to 2026-06-03 07:31:04.583178027 +0000 UTC m=+423.558971544 I0603 07:31:04.802973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n7bfr-b6lrc" condition "Approved" to 2026-06-03 07:31:04.802959099 +0000 UTC m=+423.778752636 I0603 07:31:04.826174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n7bfr-b6lrc" condition "Ready" to 2026-06-03 07:31:04.826163672 +0000 UTC m=+423.801957189 I0603 07:31:04.866674 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n7bfr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:31:04.866664363 +0000 UTC m=+423.842457860 I0603 07:31:04.882812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n7bfr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n7bfr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:31:17.128262 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-03 07:31:17.128246728 +0000 UTC m=+436.104040245 I0603 07:31:17.128707 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:31:17.128884 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-03 07:31:17.12887382 +0000 UTC m=+436.104667347 I0603 07:31:17.144738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:31:17.144816 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-03 07:31:17.144809804 +0000 UTC m=+436.120603311 I0603 07:31:17.262825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:31:17.328597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8jl5s" condition "Approved" to 2026-06-03 07:31:17.328582667 +0000 UTC m=+436.304376184 I0603 07:31:17.352031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8jl5s" condition "Ready" to 2026-06-03 07:31:17.352022063 +0000 UTC m=+436.327815560 I0603 07:31:17.383564 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:31:17.383545414 +0000 UTC m=+436.359338931 I0603 07:31:17.403584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:31:17.403950 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:31:17.403939333 +0000 UTC m=+436.379732850 I0603 07:31:17.409667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:31:17.422049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:34:36.792634 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-03 07:34:36.792606754 +0000 UTC m=+635.768400291 I0603 07:34:36.792907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:34:36.792993 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-03 07:34:36.79298476 +0000 UTC m=+635.768778277 I0603 07:34:36.812530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:34:36.812915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:34:36.812942 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-03 07:34:36.812935002 +0000 UTC m=+635.788728509 I0603 07:34:36.931532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xxx9p" condition "Approved" to 2026-06-03 07:34:36.93151207 +0000 UTC m=+635.907305597 I0603 07:34:36.954237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xxx9p" condition "Ready" to 2026-06-03 07:34:36.954224354 +0000 UTC m=+635.930017871 I0603 07:34:36.983694 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:34:36.983680754 +0000 UTC m=+635.959474281 I0603 07:34:37.007886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:35:20.247154 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-03 07:35:20.247130553 +0000 UTC m=+679.222924090 I0603 07:35:20.248979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:35:20.249050 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-03 07:35:20.249043003 +0000 UTC m=+679.224836550 I0603 07:35:20.264196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:35:20.264297 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0603 07:35:20.264319 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-03 07:35:20.264313706 +0000 UTC m=+679.240107213 I0603 07:35:20.598603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:35:20.610695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2zptd" condition "Approved" to 2026-06-03 07:35:20.610684234 +0000 UTC m=+679.586477741 I0603 07:35:20.634332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2zptd" condition "Ready" to 2026-06-03 07:35:20.634319136 +0000 UTC m=+679.610112633 I0603 07:35:20.668302 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-03 07:35:20.668289726 +0000 UTC m=+679.644083243 I0603 07:35:20.690347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0603 07:35:20.736587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"