I0609 16:45:06.797633 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0609 16:45:06.797729 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0609 16:45:06.797795 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0609 16:45:06.803077 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0609 16:45:06.803466 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0609 16:45:06.803662 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0609 16:45:06.803788 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0609 16:45:06.806088 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0609 16:45:06.821589 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0609 16:45:06.826164 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0609 16:45:06.829035 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0609 16:45:06.829323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0609 16:45:06.834224 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0609 16:45:06.836883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0609 16:45:06.839208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0609 16:45:06.841268 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0609 16:45:06.842947 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0609 16:45:06.843019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0609 16:45:06.845455 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0609 16:45:06.851006 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0609 16:45:06.854192 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0609 16:45:06.854209 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0609 16:45:06.854363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0609 16:45:06.856273 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0609 16:45:06.857885 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0609 16:45:06.859651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0609 16:45:06.861484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0609 16:45:06.863321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0609 16:45:06.864878 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0609 16:45:06.864898 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0609 16:45:06.865047 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0609 16:45:06.866842 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0609 16:45:06.874146 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0609 16:45:06.876295 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:06.878713 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:06.878922 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:06.879998 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:06.893165 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:06.913762 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:06.934383 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:06.948380 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:06.961052 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:06.969635 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:45:17.547896 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-09 16:45:17.547876105 +0000 UTC m=+10.785086770 I0609 16:45:18.298014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:45:18.298059 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-09 16:45:18.298050584 +0000 UTC m=+11.535261219 I0609 16:45:18.298072 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-09 16:45:18.298056375 +0000 UTC m=+11.535267030 E0609 16:45:18.314035 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 16:45:18.314261 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-09 16:45:18.314248784 +0000 UTC m=+11.551459419 E0609 16:45:18.314337 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 16:45:18.317987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:45:18.318245 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-09 16:45:18.318059591 +0000 UTC m=+11.555270266 E0609 16:45:18.328523 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0609 16:45:18.328607 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:45:18.328646 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:45:18.328676 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0609 16:45:18.334944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:45:18.356927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9mlcf" condition "Approved" to 2026-06-09 16:45:18.356914175 +0000 UTC m=+11.594124830 I0609 16:45:18.366673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9mlcf" condition "Ready" to 2026-06-09 16:45:18.36666308 +0000 UTC m=+11.603873715 I0609 16:45:18.388642 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:45:18.388631121 +0000 UTC m=+11.625841756 I0609 16:45:18.403652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:45:18.403862 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:45:18.403856399 +0000 UTC m=+11.641067034 I0609 16:45:18.418523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:45:18.420863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:45:23.329820 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:45:23.32980598 +0000 UTC m=+16.567016645 I0609 16:45:46.317896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:45:46.317966 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-09 16:45:46.317952894 +0000 UTC m=+39.555163559 I0609 16:45:46.317893 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-09 16:45:46.317855191 +0000 UTC m=+39.555065826 I0609 16:45:46.333479 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-09 16:45:46.333465703 +0000 UTC m=+39.570676338 I0609 16:45:46.344862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:45:46.345036 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-09 16:45:46.345029347 +0000 UTC m=+39.582239972 I0609 16:45:46.798498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:45:46.827774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w5d4j" condition "Approved" to 2026-06-09 16:45:46.827756951 +0000 UTC m=+40.064967586 I0609 16:45:46.860179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w5d4j" condition "Ready" to 2026-06-09 16:45:46.860168475 +0000 UTC m=+40.097379120 I0609 16:45:46.901675 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:45:46.901664959 +0000 UTC m=+40.138875584 I0609 16:45:46.927179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:50:09.219630 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-157.nip.io-tls" condition "Ready" to 2026-06-09 16:50:09.219586679 +0000 UTC m=+302.456797314 I0609 16:50:09.219697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:50:09.219876 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-157.nip.io-tls" condition "Issuing" to 2026-06-09 16:50:09.219860057 +0000 UTC m=+302.457070772 I0609 16:50:09.240073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:50:09.240244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:50:09.240297 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-157.nip.io-tls" condition "Issuing" to 2026-06-09 16:50:09.240289855 +0000 UTC m=+302.477500490 I0609 16:50:09.461886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-157.nip.io-tls-jkwcw" condition "Approved" to 2026-06-09 16:50:09.461875191 +0000 UTC m=+302.699085846 I0609 16:50:09.485939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-157.nip.io-tls-jkwcw" condition "Ready" to 2026-06-09 16:50:09.48592287 +0000 UTC m=+302.723133535 I0609 16:50:09.517373 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:50:09.51736262 +0000 UTC m=+302.754573255 I0609 16:50:09.534477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:50:09.534801 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:50:09.534794987 +0000 UTC m=+302.772005622 I0609 16:50:09.554579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:51:14.438407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:51:14.438482 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-09 16:51:14.438470362 +0000 UTC m=+367.675681017 I0609 16:51:14.438407 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-09 16:51:14.43836546 +0000 UTC m=+367.675576115 E0609 16:51:14.471836 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 16:51:14.471890 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-09 16:51:14.471872641 +0000 UTC m=+367.709083276 E0609 16:51:14.471946 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 16:51:14.477228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:51:14.477482 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-09 16:51:14.47746989 +0000 UTC m=+367.714680545 E0609 16:51:14.495638 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0609 16:51:14.495760 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:51:14.495796 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:51:14.495876 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0609 16:51:14.522903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:51:14.564293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2zdvw" condition "Approved" to 2026-06-09 16:51:14.564277889 +0000 UTC m=+367.801488524 I0609 16:51:14.606625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2zdvw" condition "Ready" to 2026-06-09 16:51:14.606596323 +0000 UTC m=+367.843806988 I0609 16:51:14.655967 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:51:14.655948069 +0000 UTC m=+367.893158724 I0609 16:51:14.682276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:51:14.682502 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:51:14.682494641 +0000 UTC m=+367.919705276 I0609 16:51:14.690889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:51:14.729724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:51:19.497174 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:51:19.497077995 +0000 UTC m=+372.734288660 I0609 16:52:01.367550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:01.367578 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-09 16:52:01.367572649 +0000 UTC m=+414.604783274 I0609 16:52:01.368006 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-09 16:52:01.367987108 +0000 UTC m=+414.605197733 I0609 16:52:01.369756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:01.369791 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-09 16:52:01.369784376 +0000 UTC m=+414.606995001 I0609 16:52:01.370322 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-09 16:52:01.370304677 +0000 UTC m=+414.607515312 I0609 16:52:01.380847 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-09 16:52:01.380835488 +0000 UTC m=+414.618046113 I0609 16:52:01.381497 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:01.381940 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-09 16:52:01.381935851 +0000 UTC m=+414.619146476 I0609 16:52:01.407255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:01.407704 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-09 16:52:01.407697242 +0000 UTC m=+414.644907867 I0609 16:52:01.424655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:01.424723 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-09 16:52:01.42471794 +0000 UTC m=+414.661928555 I0609 16:52:01.425045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:01.425476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:01.425755 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-09 16:52:01.425748572 +0000 UTC m=+414.662959247 I0609 16:52:01.646808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:01.730653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:01.742295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ksphj" condition "Approved" to 2026-06-09 16:52:01.742286652 +0000 UTC m=+414.979497267 I0609 16:52:01.767721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wcd56" condition "Approved" to 2026-06-09 16:52:01.767712116 +0000 UTC m=+415.004922741 I0609 16:52:01.779458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ksphj" condition "Ready" to 2026-06-09 16:52:01.779450882 +0000 UTC m=+415.016661507 I0609 16:52:01.781118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:01.799769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wcd56" condition "Ready" to 2026-06-09 16:52:01.799757829 +0000 UTC m=+415.036968464 I0609 16:52:01.820333 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:01.820320141 +0000 UTC m=+415.057530776 I0609 16:52:01.839313 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:01.83929969 +0000 UTC m=+415.076510315 I0609 16:52:01.847871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:01.848239 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:01.848231887 +0000 UTC m=+415.085442522 I0609 16:52:01.856834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:01.857206 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:01.857193566 +0000 UTC m=+415.094404191 I0609 16:52:02.114572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:02.157465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:02.204084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:02.561630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mjc4x" condition "Approved" to 2026-06-09 16:52:02.561619035 +0000 UTC m=+415.798829670 I0609 16:52:02.672982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mjc4x" condition "Ready" to 2026-06-09 16:52:02.672968131 +0000 UTC m=+415.910178786 I0609 16:52:03.151653 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-mjc4x" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-858jb" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0609 16:52:03.314003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-w5m4j" condition "Approved" to 2026-06-09 16:52:03.313992154 +0000 UTC m=+416.551202789 I0609 16:52:03.418039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-w5m4j" condition "Ready" to 2026-06-09 16:52:03.418028223 +0000 UTC m=+416.655238848 I0609 16:52:03.857399 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:03.857382912 +0000 UTC m=+417.094593577 I0609 16:52:03.954617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:03.955025 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:03.955018026 +0000 UTC m=+417.192228661 I0609 16:52:04.206560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:04.255183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:16.110962 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" condition "Ready" to 2026-06-09 16:52:16.110925458 +0000 UTC m=+429.348136093 I0609 16:52:16.111187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:16.111236 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" condition "Issuing" to 2026-06-09 16:52:16.111213183 +0000 UTC m=+429.348423808 I0609 16:52:16.130861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:16.131038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:16.131109 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" condition "Issuing" to 2026-06-09 16:52:16.131097821 +0000 UTC m=+429.368308476 I0609 16:52:16.293728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jhjv6-fzws5" condition "Approved" to 2026-06-09 16:52:16.293716856 +0000 UTC m=+429.530927481 I0609 16:52:16.317292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jhjv6-fzws5" condition "Ready" to 2026-06-09 16:52:16.317284369 +0000 UTC m=+429.554494994 I0609 16:52:16.389450 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:16.389429889 +0000 UTC m=+429.626640544 I0609 16:52:16.479196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:16.479619 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:16.479611278 +0000 UTC m=+429.716821913 I0609 16:52:16.491638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:16.549300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jhjv6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:22.804155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:52:22.804180 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-09 16:52:22.804174839 +0000 UTC m=+436.041385464 I0609 16:52:22.804503 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-09 16:52:22.804498975 +0000 UTC m=+436.041709600 I0609 16:52:22.817608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:22.817864 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-09 16:52:22.817853147 +0000 UTC m=+436.055063812 I0609 16:52:23.015150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:52:23.052024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-shrhv" condition "Approved" to 2026-06-09 16:52:23.052010504 +0000 UTC m=+436.289221139 I0609 16:52:23.077878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-shrhv" condition "Ready" to 2026-06-09 16:52:23.077870279 +0000 UTC m=+436.315080904 I0609 16:52:23.113556 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:52:23.113538282 +0000 UTC m=+436.350748907 I0609 16:52:23.144364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:55:38.071305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:55:38.071406 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-09 16:55:38.071393118 +0000 UTC m=+631.308603783 I0609 16:55:38.071826 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-09 16:55:38.071580432 +0000 UTC m=+631.308791097 I0609 16:55:38.093358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:55:38.093413 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-09 16:55:38.093406249 +0000 UTC m=+631.330616884 I0609 16:55:38.226485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:55:38.257123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-km5vg" condition "Approved" to 2026-06-09 16:55:38.257112844 +0000 UTC m=+631.494323479 I0609 16:55:38.271050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-km5vg" condition "Ready" to 2026-06-09 16:55:38.271040875 +0000 UTC m=+631.508251510 I0609 16:55:38.307851 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:55:38.307840772 +0000 UTC m=+631.545051397 I0609 16:55:38.387072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"