I0608 15:13:19.875516 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0608 15:13:19.875702 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0608 15:13:19.875985 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0608 15:13:19.883071 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0608 15:13:19.883607 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0608 15:13:19.883615 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0608 15:13:19.883775 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0608 15:13:19.887907 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0608 15:13:19.905506 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0608 15:13:19.910211 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0608 15:13:19.910296 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0608 15:13:19.910355 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0608 15:13:19.910408 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0608 15:13:19.910457 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0608 15:13:19.914220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0608 15:13:19.917788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0608 15:13:19.928605 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0608 15:13:19.930720 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0608 15:13:19.932628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0608 15:13:19.934467 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0608 15:13:19.936268 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0608 15:13:19.942850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0608 15:13:19.946458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0608 15:13:19.951565 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0608 15:13:19.955553 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0608 15:13:19.958096 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0608 15:13:19.958175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0608 15:13:19.960202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0608 15:13:19.962215 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0608 15:13:19.964213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0608 15:13:19.966006 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0608 15:13:19.967767 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0608 15:13:19.967813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0608 15:13:19.973293 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0608 15:13:19.973947 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0608 15:13:19.974874 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0608 15:13:19.976740 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0608 15:13:19.987016 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0608 15:13:20.005807 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0608 15:13:20.019415 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0608 15:13:20.036647 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0608 15:13:20.053758 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0608 15:13:20.088667 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0608 15:13:30.622995 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-08 15:13:30.622985268 +0000 UTC m=+10.801017916 I0608 15:13:31.290024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:13:31.290098 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-08 15:13:31.290088296 +0000 UTC m=+11.468120984 I0608 15:13:31.290469 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-08 15:13:31.290444014 +0000 UTC m=+11.468476702 I0608 15:13:31.311286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0608 15:13:31.311528 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0608 15:13:31.311617 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-08 15:13:31.311601721 +0000 UTC m=+11.489634379 E0608 15:13:31.311647 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0608 15:13:31.311752 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-08 15:13:31.311738544 +0000 UTC m=+11.489771232 I0608 15:13:31.336212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0608 15:13:31.337346 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0608 15:13:31.337436 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0608 15:13:31.337467 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0608 15:13:31.337504 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0608 15:13:31.337651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:13:31.337898 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-08 15:13:31.337888207 +0000 UTC m=+11.515920865 I0608 15:13:31.341683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-p629c" condition "Approved" to 2026-06-08 15:13:31.341675311 +0000 UTC m=+11.519707959 I0608 15:13:31.352614 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-08 15:13:31.352604232 +0000 UTC m=+11.530636890 I0608 15:13:31.356606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-p629c" condition "Ready" to 2026-06-08 15:13:31.356596298 +0000 UTC m=+11.534628956 I0608 15:13:31.358121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:13:31.382716 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:13:31.382706571 +0000 UTC m=+11.560739229 I0608 15:13:31.402022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:13:31.402401 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:13:31.402390592 +0000 UTC m=+11.580423250 I0608 15:13:31.420553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:13:31.420686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:13:36.338636 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:13:36.338623124 +0000 UTC m=+16.516655812 I0608 15:14:02.871201 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-08 15:14:02.871189874 +0000 UTC m=+43.049222532 I0608 15:14:02.871331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:14:02.871409 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-08 15:14:02.871401567 +0000 UTC m=+43.049434225 I0608 15:14:02.884124 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-08 15:14:02.884109461 +0000 UTC m=+43.062142109 I0608 15:14:02.904075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:14:02.904175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:14:02.904205 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-08 15:14:02.904198037 +0000 UTC m=+43.082230685 I0608 15:14:03.217990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:14:03.219180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g6vxm" condition "Approved" to 2026-06-08 15:14:03.219169252 +0000 UTC m=+43.397201900 I0608 15:14:03.250588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g6vxm" condition "Ready" to 2026-06-08 15:14:03.250573686 +0000 UTC m=+43.428606344 I0608 15:14:03.284755 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:14:03.284742637 +0000 UTC m=+43.462775285 I0608 15:14:03.308608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:14:03.309372 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:14:03.309357877 +0000 UTC m=+43.487390525 I0608 15:14:03.311922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:14:03.359838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:18:17.807907 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-06-08 15:18:17.807891385 +0000 UTC m=+297.985924063 I0608 15:18:17.807991 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:18:17.808050 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-06-08 15:18:17.808043619 +0000 UTC m=+297.986076267 I0608 15:18:17.826067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:18:17.826158 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-06-08 15:18:17.826147295 +0000 UTC m=+298.004179983 I0608 15:18:17.972849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:18:17.999494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-f5g7g" condition "Approved" to 2026-06-08 15:18:17.999481596 +0000 UTC m=+298.177514254 I0608 15:18:18.029794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-f5g7g" condition "Ready" to 2026-06-08 15:18:18.029777111 +0000 UTC m=+298.207809779 I0608 15:18:18.055857 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:18:18.055843332 +0000 UTC m=+298.233875990 I0608 15:18:18.081610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:18:18.082135 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:18:18.082126628 +0000 UTC m=+298.260159286 I0608 15:18:18.085092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:18:18.097854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:19:37.850761 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-08 15:19:37.850748037 +0000 UTC m=+378.028780695 I0608 15:19:37.850966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:19:37.851408 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-08 15:19:37.851206635 +0000 UTC m=+378.029239323 E0608 15:19:37.864108 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0608 15:19:37.864149 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-08 15:19:37.864143658 +0000 UTC m=+378.042176306 E0608 15:19:37.864190 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0608 15:19:37.865829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:19:37.866029 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:19:37.866141 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-08 15:19:37.866049922 +0000 UTC m=+378.044082580 E0608 15:19:37.874623 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0608 15:19:37.875029 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0608 15:19:37.875248 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0608 15:19:37.876371 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0608 15:19:37.901215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-d44x4" condition "Approved" to 2026-06-08 15:19:37.901200928 +0000 UTC m=+378.079233616 I0608 15:19:37.913372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-d44x4" condition "Ready" to 2026-06-08 15:19:37.913361858 +0000 UTC m=+378.091394506 I0608 15:19:37.940091 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:19:37.940077069 +0000 UTC m=+378.118109727 I0608 15:19:37.957354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:19:37.957869 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:19:37.957859936 +0000 UTC m=+378.135892594 I0608 15:19:37.967843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:19:37.973588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:19:42.875618 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:19:42.875607761 +0000 UTC m=+383.053640419 I0608 15:20:27.465564 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-08 15:20:27.4655536 +0000 UTC m=+427.643586248 I0608 15:20:27.465730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:20:27.465753 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-08 15:20:27.465750784 +0000 UTC m=+427.643783432 I0608 15:20:27.483230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:20:27.483268 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-08 15:20:27.483261191 +0000 UTC m=+427.661293839 I0608 15:20:27.487380 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-08 15:20:27.487371458 +0000 UTC m=+427.665404106 I0608 15:20:27.487942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:20:27.487977 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-08 15:20:27.487971157 +0000 UTC m=+427.666003805 I0608 15:20:27.488102 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-08 15:20:27.488096349 +0000 UTC m=+427.666128997 I0608 15:20:27.518940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:27.519522 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-08 15:20:27.519007515 +0000 UTC m=+427.697040153 I0608 15:20:27.519731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:27.519777 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-08 15:20:27.519770498 +0000 UTC m=+427.697803136 I0608 15:20:27.530953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:27.531012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:20:27.531031 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-08 15:20:27.531026702 +0000 UTC m=+427.709059350 I0608 15:20:27.784784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:27.828664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:27.862825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p2bwp" condition "Approved" to 2026-06-08 15:20:27.862816068 +0000 UTC m=+428.040848716 I0608 15:20:27.887284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p2bwp" condition "Ready" to 2026-06-08 15:20:27.887276239 +0000 UTC m=+428.065308887 I0608 15:20:27.911314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7x7l6" condition "Approved" to 2026-06-08 15:20:27.911305431 +0000 UTC m=+428.089338079 I0608 15:20:27.920024 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:20:27.920014085 +0000 UTC m=+428.098046733 I0608 15:20:28.025272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7x7l6" condition "Ready" to 2026-06-08 15:20:28.025263355 +0000 UTC m=+428.203296003 I0608 15:20:28.052705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:28.052998 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:20:28.052992239 +0000 UTC m=+428.231024877 I0608 15:20:28.099505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:28.108117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:28.111326 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:20:28.111318971 +0000 UTC m=+428.289351629 I0608 15:20:28.163517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:28.221332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xzvt6" condition "Approved" to 2026-06-08 15:20:28.221317139 +0000 UTC m=+428.399349797 I0608 15:20:28.360865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:28.361221 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:20:28.361214815 +0000 UTC m=+428.539247473 I0608 15:20:28.589299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xzvt6" condition "Ready" to 2026-06-08 15:20:28.589282532 +0000 UTC m=+428.767315210 I0608 15:20:29.284066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:29.284130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0608 15:20:29.303051 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-n8xqz\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0608 15:20:29.665373 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-xzvt6" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-4kjwf" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0608 15:20:29.696950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gxgdq" condition "Approved" to 2026-06-08 15:20:29.696935823 +0000 UTC m=+429.874968481 I0608 15:20:29.717288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gxgdq" condition "Ready" to 2026-06-08 15:20:29.717270455 +0000 UTC m=+429.895303113 I0608 15:20:30.117418 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:20:30.117402936 +0000 UTC m=+430.295435624 I0608 15:20:30.211596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:30.211958 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:20:30.211950159 +0000 UTC m=+430.389982817 I0608 15:20:30.473398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:30.511356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:41.009524 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" condition "Ready" to 2026-06-08 15:20:41.009506781 +0000 UTC m=+441.187539439 I0608 15:20:41.009501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:20:41.009969 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" condition "Issuing" to 2026-06-08 15:20:41.009955038 +0000 UTC m=+441.187987686 I0608 15:20:41.031854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:41.031956 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:20:41.031976 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" condition "Issuing" to 2026-06-08 15:20:41.031969914 +0000 UTC m=+441.210002572 I0608 15:20:41.175601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s5ctr-ttsxs" condition "Approved" to 2026-06-08 15:20:41.175586654 +0000 UTC m=+441.353619312 I0608 15:20:41.202111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s5ctr-ttsxs" condition "Ready" to 2026-06-08 15:20:41.202097364 +0000 UTC m=+441.380130012 I0608 15:20:41.238763 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:20:41.238747986 +0000 UTC m=+441.416780624 I0608 15:20:41.262430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:41.262682 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:20:41.262672882 +0000 UTC m=+441.440705540 I0608 15:20:41.270852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:41.283049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s5ctr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:57.122164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:20:57.122208 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-08 15:20:57.122199095 +0000 UTC m=+457.300231753 I0608 15:20:57.122360 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-08 15:20:57.122337468 +0000 UTC m=+457.300370116 I0608 15:20:57.135117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:57.135171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:20:57.135184 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-08 15:20:57.135177082 +0000 UTC m=+457.313209730 I0608 15:20:57.410727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:57.423137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xqk9m" condition "Approved" to 2026-06-08 15:20:57.423120539 +0000 UTC m=+457.601153197 I0608 15:20:57.447202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xqk9m" condition "Ready" to 2026-06-08 15:20:57.447189514 +0000 UTC m=+457.625222162 I0608 15:20:57.492384 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:20:57.492357675 +0000 UTC m=+457.670390353 I0608 15:20:57.514144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:57.514735 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:20:57.514725311 +0000 UTC m=+457.692757969 I0608 15:20:57.524204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:20:57.539956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:24:18.171361 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-08 15:24:18.171343715 +0000 UTC m=+658.349376383 I0608 15:24:18.171395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:24:18.171453 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-08 15:24:18.171445606 +0000 UTC m=+658.349478274 I0608 15:24:18.193207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:24:18.193286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:24:18.193311 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-08 15:24:18.193303839 +0000 UTC m=+658.371336497 I0608 15:24:18.318036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:24:18.330136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-85hfj" condition "Approved" to 2026-06-08 15:24:18.330113183 +0000 UTC m=+658.508145821 I0608 15:24:18.353430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-85hfj" condition "Ready" to 2026-06-08 15:24:18.353409827 +0000 UTC m=+658.531442505 I0608 15:24:18.394575 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:24:18.394548945 +0000 UTC m=+658.572581603 I0608 15:24:18.415264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:24:18.415529 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:24:18.415522796 +0000 UTC m=+658.593555444 I0608 15:24:18.437082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:24:18.437212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:24:18.437429 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:24:18.437422159 +0000 UTC m=+658.615454827 I0608 15:25:04.606787 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-08 15:25:04.606770958 +0000 UTC m=+704.784803616 I0608 15:25:04.606806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:25:04.607142 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-08 15:25:04.60710358 +0000 UTC m=+704.785136258 I0608 15:25:04.628992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0608 15:25:04.629061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0608 15:25:04.629079 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-08 15:25:04.629071879 +0000 UTC m=+704.807104527 I0608 15:25:04.939821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5p7q5" condition "Approved" to 2026-06-08 15:25:04.939809313 +0000 UTC m=+705.117841971 I0608 15:25:04.966013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5p7q5" condition "Ready" to 2026-06-08 15:25:04.965999257 +0000 UTC m=+705.144031905 I0608 15:25:05.005413 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-08 15:25:05.005388394 +0000 UTC m=+705.183421042 I0608 15:25:05.024168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"