I0610 08:27:23.713878 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0610 08:27:23.713984 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0610 08:27:23.714060 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0610 08:27:23.717251 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0610 08:27:23.717590 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0610 08:27:23.717613 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0610 08:27:23.717659 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0610 08:27:23.720198 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0610 08:27:23.732739 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0610 08:27:23.736540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0610 08:27:23.742358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0610 08:27:23.744732 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0610 08:27:23.744778 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0610 08:27:23.747465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0610 08:27:23.749571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0610 08:27:23.751990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0610 08:27:23.753654 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0610 08:27:23.755651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0610 08:27:23.758922 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0610 08:27:23.761631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0610 08:27:23.763148 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0610 08:27:23.764859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0610 08:27:23.766375 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0610 08:27:23.766530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0610 08:27:23.769433 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0610 08:27:23.772048 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0610 08:27:23.772064 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0610 08:27:23.772070 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0610 08:27:23.772203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0610 08:27:23.774037 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0610 08:27:23.775873 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0610 08:27:23.777996 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0610 08:27:23.779212 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0610 08:27:23.782493 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 08:27:23.782868 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 08:27:23.784006 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 08:27:23.815476 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 08:27:23.849971 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 08:27:23.850699 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 08:27:23.866223 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 08:27:23.885530 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 08:27:23.888917 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 08:27:23.901591 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0610 08:27:37.751539 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-10 08:27:37.751511988 +0000 UTC m=+14.071167017 I0610 08:27:38.458819 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-10 08:27:38.458807464 +0000 UTC m=+14.778462483 I0610 08:27:38.459564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:27:38.459581 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-10 08:27:38.459578266 +0000 UTC m=+14.779233265 E0610 08:27:38.473025 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 08:27:38.473126 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-10 08:27:38.473116496 +0000 UTC m=+14.792771525 E0610 08:27:38.473203 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 08:27:38.476509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:27:38.476773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:27:38.476905 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-10 08:27:38.476803251 +0000 UTC m=+14.796458340 E0610 08:27:38.486312 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0610 08:27:38.486566 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 08:27:38.486641 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 08:27:38.486693 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0610 08:27:38.513843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:27:38.521478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r6l4m" condition "Approved" to 2026-06-10 08:27:38.521466642 +0000 UTC m=+14.841121661 I0610 08:27:38.533118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r6l4m" condition "Ready" to 2026-06-10 08:27:38.533107404 +0000 UTC m=+14.852762423 I0610 08:27:38.555763 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:27:38.555743929 +0000 UTC m=+14.875398968 I0610 08:27:38.571235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:27:38.571763 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:27:38.571755836 +0000 UTC m=+14.891410855 I0610 08:27:38.586624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:27:38.586844 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:27:38.586832259 +0000 UTC m=+14.906487258 I0610 08:27:38.593668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:27:43.487411 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:27:43.487393444 +0000 UTC m=+19.807048483 I0610 08:28:08.989053 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-10 08:28:08.989013836 +0000 UTC m=+45.308668845 I0610 08:28:08.989438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:28:08.989678 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-10 08:28:08.989669954 +0000 UTC m=+45.309324993 I0610 08:28:09.002351 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-10 08:28:09.002337959 +0000 UTC m=+45.321992988 I0610 08:28:09.023457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:28:09.023552 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:28:09.023582 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-10 08:28:09.023573904 +0000 UTC m=+45.343228913 I0610 08:28:09.130185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s48zx" condition "Approved" to 2026-06-10 08:28:09.130174825 +0000 UTC m=+45.449829834 I0610 08:28:09.169847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s48zx" condition "Ready" to 2026-06-10 08:28:09.169836829 +0000 UTC m=+45.489491828 I0610 08:28:09.199783 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:28:09.199770937 +0000 UTC m=+45.519425946 I0610 08:28:09.247402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:28:09.247677 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:28:09.247671818 +0000 UTC m=+45.567326817 I0610 08:28:09.301232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:32:50.374627 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-126.nip.io-tls" condition "Ready" to 2026-06-10 08:32:50.373845513 +0000 UTC m=+326.693500552 I0610 08:32:50.375404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-126.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:32:50.375444 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-126.nip.io-tls" condition "Issuing" to 2026-06-10 08:32:50.375437618 +0000 UTC m=+326.695092647 I0610 08:32:50.476095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-126.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-126.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:32:50.476180 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-126.nip.io-tls" condition "Ready" to 2026-06-10 08:32:50.476173622 +0000 UTC m=+326.795828621 I0610 08:32:50.874337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-126.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-126.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:32:50.953798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-126.nip.io-tls-6bwlc" condition "Approved" to 2026-06-10 08:32:50.953754423 +0000 UTC m=+327.273409462 I0610 08:32:51.039237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-126.nip.io-tls-6bwlc" condition "Ready" to 2026-06-10 08:32:51.039226109 +0000 UTC m=+327.358881118 I0610 08:32:51.123055 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-126.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:32:51.123035627 +0000 UTC m=+327.442690666 I0610 08:32:51.205158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-126.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-126.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:32:51.205563 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-126.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:32:51.205553666 +0000 UTC m=+327.525208675 I0610 08:32:51.377009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-126.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-126.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:32:51.408143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-126.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-126.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:33:57.540324 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-10 08:33:57.540278128 +0000 UTC m=+393.859933157 I0610 08:33:57.540862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:33:57.540898 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-10 08:33:57.540890879 +0000 UTC m=+393.860545908 E0610 08:33:57.550836 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 08:33:57.550896 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-10 08:33:57.550888557 +0000 UTC m=+393.870543566 E0610 08:33:57.550918 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0610 08:33:57.555776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:33:57.556361 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:33:57.556404 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-10 08:33:57.55639422 +0000 UTC m=+393.876049259 E0610 08:33:57.560022 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0610 08:33:57.560227 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 08:33:57.560255 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0610 08:33:57.560380 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0610 08:33:57.590194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gx9tq" condition "Approved" to 2026-06-10 08:33:57.590182653 +0000 UTC m=+393.909837662 I0610 08:33:57.591481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:33:57.607867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gx9tq" condition "Ready" to 2026-06-10 08:33:57.607853874 +0000 UTC m=+393.927508883 I0610 08:33:57.629045 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:33:57.62903208 +0000 UTC m=+393.948687109 I0610 08:33:57.643589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:02.561142 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:34:02.561127103 +0000 UTC m=+398.880782132 I0610 08:34:42.975718 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-10 08:34:42.975670098 +0000 UTC m=+439.295325097 I0610 08:34:42.976111 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-10 08:34:42.975987604 +0000 UTC m=+439.295642603 I0610 08:34:42.976120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:34:42.976132 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:34:42.976182 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-10 08:34:42.976176787 +0000 UTC m=+439.295831786 I0610 08:34:42.976154 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-10 08:34:42.976147146 +0000 UTC m=+439.295802155 I0610 08:34:42.976993 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-10 08:34:42.976989072 +0000 UTC m=+439.296644071 I0610 08:34:42.977147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:34:42.977160 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-10 08:34:42.977158135 +0000 UTC m=+439.296813134 I0610 08:34:43.041150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:43.041232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:34:43.041162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:43.041258 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-10 08:34:43.041252285 +0000 UTC m=+439.360907284 I0610 08:34:43.041307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:34:43.041331 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-10 08:34:43.041324916 +0000 UTC m=+439.360979915 I0610 08:34:43.041724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:43.041777 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:34:43.041796 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-10 08:34:43.041793024 +0000 UTC m=+439.361448023 I0610 08:34:43.293983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-w84nh" condition "Approved" to 2026-06-10 08:34:43.293972908 +0000 UTC m=+439.613627907 I0610 08:34:43.317423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-w84nh" condition "Ready" to 2026-06-10 08:34:43.317414013 +0000 UTC m=+439.637069012 I0610 08:34:43.358624 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:34:43.358610566 +0000 UTC m=+439.678265555 I0610 08:34:43.384980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:43.385224 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:34:43.385219526 +0000 UTC m=+439.704874525 I0610 08:34:43.393963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:43.420421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:43.443200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5dmcl" condition "Approved" to 2026-06-10 08:34:43.443190099 +0000 UTC m=+439.762845098 I0610 08:34:43.464188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5dmcl" condition "Ready" to 2026-06-10 08:34:43.464169843 +0000 UTC m=+439.783824882 I0610 08:34:43.519701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-85dcb" condition "Approved" to 2026-06-10 08:34:43.519687253 +0000 UTC m=+439.839342262 I0610 08:34:43.538484 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:34:43.538474428 +0000 UTC m=+439.858129427 I0610 08:34:43.607314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-85dcb" condition "Ready" to 2026-06-10 08:34:43.607304269 +0000 UTC m=+439.926959278 I0610 08:34:44.047599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:44.047865 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:34:44.047860011 +0000 UTC m=+440.367515010 I0610 08:34:44.356146 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:34:44.356126447 +0000 UTC m=+440.675781456 I0610 08:34:44.396914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:44.554506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:44.568890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:34:44.569066 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:34:44.569060716 +0000 UTC m=+440.888715715 I0610 08:34:44.797775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:35:45.570194 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" condition "Ready" to 2026-06-10 08:35:45.570160493 +0000 UTC m=+501.889815522 I0610 08:35:45.570372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:35:45.570415 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" condition "Issuing" to 2026-06-10 08:35:45.570404187 +0000 UTC m=+501.890059216 I0610 08:35:45.589355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dtfth-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:35:45.589442 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" condition "Ready" to 2026-06-10 08:35:45.589432411 +0000 UTC m=+501.909087430 I0610 08:35:45.858274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dtfth-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:35:45.891515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dtfth-m979l" condition "Approved" to 2026-06-10 08:35:45.891499496 +0000 UTC m=+502.211154505 I0610 08:35:45.920346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dtfth-m979l" condition "Ready" to 2026-06-10 08:35:45.920334659 +0000 UTC m=+502.239989668 I0610 08:35:45.966673 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:35:45.966654642 +0000 UTC m=+502.286309681 I0610 08:35:45.991501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dtfth-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:35:45.992136 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:35:45.99212782 +0000 UTC m=+502.311782819 I0610 08:35:46.012249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dtfth-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:35:46.012253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dtfth-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:35:46.012603 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dtfth-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:35:46.012593899 +0000 UTC m=+502.332248898 I0610 08:35:46.064476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:35:46.064632 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-10 08:35:46.064615362 +0000 UTC m=+502.384270361 I0610 08:35:46.065011 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-10 08:35:46.065007558 +0000 UTC m=+502.384662557 I0610 08:35:46.083515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:35:46.083793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:35:46.083893 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-10 08:35:46.08382593 +0000 UTC m=+502.403480939 I0610 08:35:46.246369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2jwgb" condition "Approved" to 2026-06-10 08:35:46.246353374 +0000 UTC m=+502.566008393 I0610 08:35:46.264891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2jwgb" condition "Ready" to 2026-06-10 08:35:46.264879861 +0000 UTC m=+502.584534860 I0610 08:35:46.291200 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:35:46.291188372 +0000 UTC m=+502.610843361 I0610 08:35:46.309681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:38:40.117595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:38:40.117668 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-10 08:38:40.117656218 +0000 UTC m=+676.437311217 I0610 08:38:40.117667 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-10 08:38:40.117643618 +0000 UTC m=+676.437298617 I0610 08:38:40.138579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:38:40.138659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:38:40.138680 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-10 08:38:40.138673946 +0000 UTC m=+676.458328955 I0610 08:38:40.331325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ms9w7" condition "Approved" to 2026-06-10 08:38:40.331310091 +0000 UTC m=+676.650965090 I0610 08:38:40.354552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ms9w7" condition "Ready" to 2026-06-10 08:38:40.354543049 +0000 UTC m=+676.674198038 I0610 08:38:40.388956 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:38:40.388943673 +0000 UTC m=+676.708598682 I0610 08:38:40.414143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:39:32.600744 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0610 08:39:32.600913 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-10 08:39:32.600895883 +0000 UTC m=+728.920550892 I0610 08:39:32.602064 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-10 08:39:32.60204554 +0000 UTC m=+728.921700569 I0610 08:39:32.621088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:39:32.621705 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-10 08:39:32.621690127 +0000 UTC m=+728.941345166 I0610 08:39:32.737850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:39:32.774352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-db2g5" condition "Approved" to 2026-06-10 08:39:32.774336204 +0000 UTC m=+729.093991213 I0610 08:39:32.794530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-db2g5" condition "Ready" to 2026-06-10 08:39:32.794516982 +0000 UTC m=+729.114171981 I0610 08:39:32.835872 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:39:32.835850999 +0000 UTC m=+729.155505998 I0610 08:39:32.862590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:39:32.863247 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:39:32.863235467 +0000 UTC m=+729.182890476 I0610 08:39:32.882687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0610 08:39:32.882994 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-10 08:39:32.882984118 +0000 UTC m=+729.202639127