I0601 03:28:53.389011 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0601 03:28:53.389361 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0601 03:28:53.389530 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0601 03:28:53.396616 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0601 03:28:53.397214 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0601 03:28:53.397265 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0601 03:28:53.397219 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0601 03:28:53.400424 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0601 03:28:53.414978 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0601 03:28:53.415373 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0601 03:28:53.415454 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0601 03:28:53.415495 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0601 03:28:53.415530 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0601 03:28:53.415566 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0601 03:28:53.419719 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0601 03:28:53.424188 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0601 03:28:53.429882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0601 03:28:53.432169 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0601 03:28:53.434279 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0601 03:28:53.436141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0601 03:28:53.437888 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0601 03:28:53.439832 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0601 03:28:53.441877 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0601 03:28:53.448451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0601 03:28:53.452015 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0601 03:28:53.454188 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0601 03:28:53.456803 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0601 03:28:53.459303 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0601 03:28:53.459454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0601 03:28:53.462029 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0601 03:28:53.464454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0601 03:28:53.468068 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0601 03:28:53.472158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0601 03:28:53.474383 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 03:28:53.478668 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 03:28:53.479344 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 03:28:53.502284 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 03:28:53.516894 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 03:28:53.541093 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 03:28:53.550328 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 03:28:53.566612 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 03:28:53.576318 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 03:28:53.579929 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0601 03:29:06.886547 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-01 03:29:06.886526651 +0000 UTC m=+13.537484057 I0601 03:29:07.610414 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-01 03:29:07.610399815 +0000 UTC m=+14.261357201 I0601 03:29:07.610492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:29:07.610571 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-01 03:29:07.61055955 +0000 UTC m=+14.261516936 E0601 03:29:07.625996 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0601 03:29:07.626069 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-01 03:29:07.626061848 +0000 UTC m=+14.277019214 E0601 03:29:07.626091 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0601 03:29:07.627954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:29:07.628050 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:29:07.628071 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-01 03:29:07.62806478 +0000 UTC m=+14.279022146 E0601 03:29:07.634671 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0601 03:29:07.634736 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0601 03:29:07.634766 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0601 03:29:07.634794 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0601 03:29:07.655788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:29:07.664216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fk7gp" condition "Approved" to 2026-06-01 03:29:07.664205126 +0000 UTC m=+14.315162492 I0601 03:29:07.676949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fk7gp" condition "Ready" to 2026-06-01 03:29:07.676934567 +0000 UTC m=+14.327891964 I0601 03:29:07.695158 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:29:07.69515205 +0000 UTC m=+14.346109406 I0601 03:29:07.709534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:29:07.746670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:29:12.635512 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:29:12.635502022 +0000 UTC m=+19.286459388 I0601 03:29:35.365807 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-01 03:29:35.365764175 +0000 UTC m=+42.016721531 I0601 03:29:35.366142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:29:35.366161 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-01 03:29:35.366158278 +0000 UTC m=+42.017115634 I0601 03:29:35.384780 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-01 03:29:35.38477045 +0000 UTC m=+42.035727806 I0601 03:29:35.416710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:29:35.416776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:29:35.416793 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-01 03:29:35.416787992 +0000 UTC m=+42.067745348 I0601 03:29:35.642311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lx7fz" condition "Approved" to 2026-06-01 03:29:35.642291082 +0000 UTC m=+42.293248478 I0601 03:29:35.679781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lx7fz" condition "Ready" to 2026-06-01 03:29:35.679763512 +0000 UTC m=+42.330720878 I0601 03:29:35.727328 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:29:35.72731337 +0000 UTC m=+42.378270736 I0601 03:29:35.755117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:29:35.755478 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:29:35.75546661 +0000 UTC m=+42.406423976 I0601 03:29:35.783279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:33:53.957615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:33:53.957657 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Issuing" to 2026-06-01 03:33:53.957648514 +0000 UTC m=+300.608605860 I0601 03:33:53.957578 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready" to 2026-06-01 03:33:53.957559213 +0000 UTC m=+300.608516609 I0601 03:33:53.977930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:33:53.978275 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:33:53.978386 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Issuing" to 2026-06-01 03:33:53.978309826 +0000 UTC m=+300.629267212 I0601 03:33:54.265660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:33:54.278784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-89.nip.io-tls-8cs89" condition "Approved" to 2026-06-01 03:33:54.278775457 +0000 UTC m=+300.929732813 I0601 03:33:54.317513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-89.nip.io-tls-8cs89" condition "Ready" to 2026-06-01 03:33:54.31750349 +0000 UTC m=+300.968460836 I0601 03:33:54.352388 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:33:54.352367397 +0000 UTC m=+301.003324793 I0601 03:33:54.375880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:33:54.376165 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:33:54.376159585 +0000 UTC m=+301.027116941 I0601 03:33:54.378353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:33:54.391099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:33:54.391601 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:33:54.391591499 +0000 UTC m=+301.042548855 I0601 03:34:57.981089 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-01 03:34:57.981033091 +0000 UTC m=+364.631990477 I0601 03:34:57.981170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:34:57.981307 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-01 03:34:57.981265487 +0000 UTC m=+364.632222873 E0601 03:34:57.993143 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0601 03:34:57.993185 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-01 03:34:57.993176712 +0000 UTC m=+364.644134078 E0601 03:34:57.993229 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0601 03:34:57.994016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:34:57.994135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:34:57.994244 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-01 03:34:57.994154426 +0000 UTC m=+364.645111782 E0601 03:34:58.004116 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0601 03:34:58.004869 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0601 03:34:58.004981 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0601 03:34:58.005065 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0601 03:34:58.034757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:34:58.034991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bl2qw" condition "Approved" to 2026-06-01 03:34:58.034144082 +0000 UTC m=+364.685101448 I0601 03:34:58.047280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bl2qw" condition "Ready" to 2026-06-01 03:34:58.047252688 +0000 UTC m=+364.698210054 I0601 03:34:58.066296 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:34:58.066286863 +0000 UTC m=+364.717244219 I0601 03:34:58.081840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:34:58.082137 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:34:58.082127018 +0000 UTC m=+364.733084384 I0601 03:34:58.099657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:34:58.100382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:34:58.100579 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:34:58.100564207 +0000 UTC m=+364.751521563 I0601 03:35:03.005714 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:35:03.005697311 +0000 UTC m=+369.656654707 I0601 03:35:42.750149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:35:42.750177 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-01 03:35:42.750171748 +0000 UTC m=+409.401129104 I0601 03:35:42.752071 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-01 03:35:42.752065611 +0000 UTC m=+409.403022967 I0601 03:35:42.752439 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:35:42.752451 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-01 03:35:42.752446612 +0000 UTC m=+409.403403968 I0601 03:35:42.752575 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-01 03:35:42.752572096 +0000 UTC m=+409.403529452 I0601 03:35:42.758650 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-01 03:35:42.758637388 +0000 UTC m=+409.409594744 I0601 03:35:42.759639 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:35:42.759674 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-01 03:35:42.759665097 +0000 UTC m=+409.410622463 I0601 03:35:42.798764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:42.798825 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-01 03:35:42.798818509 +0000 UTC m=+409.449775865 I0601 03:35:42.810886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:42.810935 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-01 03:35:42.810930643 +0000 UTC m=+409.461887999 I0601 03:35:42.822082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:42.822140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:35:42.822158 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-01 03:35:42.822154452 +0000 UTC m=+409.473111798 I0601 03:35:42.933479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:42.976297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kwwv7" condition "Approved" to 2026-06-01 03:35:42.97628384 +0000 UTC m=+409.627241236 I0601 03:35:43.008379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:43.045341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:43.114017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kwwv7" condition "Ready" to 2026-06-01 03:35:43.114009941 +0000 UTC m=+409.764967287 I0601 03:35:43.117003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jd674" condition "Approved" to 2026-06-01 03:35:43.116998116 +0000 UTC m=+409.767955472 I0601 03:35:43.117320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7ltqt" condition "Approved" to 2026-06-01 03:35:43.117316935 +0000 UTC m=+409.768274291 I0601 03:35:43.140049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jd674" condition "Ready" to 2026-06-01 03:35:43.140040832 +0000 UTC m=+409.790998178 I0601 03:35:43.141711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7ltqt" condition "Ready" to 2026-06-01 03:35:43.141706879 +0000 UTC m=+409.792664235 I0601 03:35:43.188619 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:35:43.188599664 +0000 UTC m=+409.839557020 I0601 03:35:43.491376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:43.491667 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:35:43.491662404 +0000 UTC m=+410.142619750 I0601 03:35:43.542722 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:35:43.542688178 +0000 UTC m=+410.193645584 I0601 03:35:43.587452 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:35:43.587424882 +0000 UTC m=+410.238382248 I0601 03:35:43.844226 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:35:43.844212944 +0000 UTC m=+410.495170310 I0601 03:35:43.937631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:43.937988 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:35:43.937981664 +0000 UTC m=+410.588939030 I0601 03:35:44.041907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:44.089000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:44.141264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:44.191273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:44.540379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:44.589097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:50.923622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:35:50.923672 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" condition "Issuing" to 2026-06-01 03:35:50.923654979 +0000 UTC m=+417.574612345 I0601 03:35:50.924628 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" condition "Ready" to 2026-06-01 03:35:50.924621728 +0000 UTC m=+417.575579114 I0601 03:35:50.941006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:50.941093 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" condition "Ready" to 2026-06-01 03:35:50.941082584 +0000 UTC m=+417.592039950 I0601 03:35:51.220685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:51.257662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wjfwj-wfgcn" condition "Approved" to 2026-06-01 03:35:51.257650366 +0000 UTC m=+417.908607752 I0601 03:35:51.281761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wjfwj-wfgcn" condition "Ready" to 2026-06-01 03:35:51.281702774 +0000 UTC m=+417.932660140 I0601 03:35:51.313067 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:35:51.312953329 +0000 UTC m=+417.963910685 I0601 03:35:51.339842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:51.340238 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:35:51.34022917 +0000 UTC m=+417.991186536 I0601 03:35:51.358417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:35:51.358898 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wjfwj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:35:51.358873211 +0000 UTC m=+418.009830597 I0601 03:36:03.190801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:36:03.190828 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-01 03:36:03.190822265 +0000 UTC m=+429.841779611 I0601 03:36:03.191745 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-01 03:36:03.191728633 +0000 UTC m=+429.842686009 I0601 03:36:03.209004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:36:03.209168 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-01 03:36:03.20916068 +0000 UTC m=+429.860118046 I0601 03:36:03.544835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:36:03.574865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jkb88" condition "Approved" to 2026-06-01 03:36:03.574852328 +0000 UTC m=+430.225809684 I0601 03:36:03.594814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jkb88" condition "Ready" to 2026-06-01 03:36:03.594804782 +0000 UTC m=+430.245762128 I0601 03:36:03.620721 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:36:03.620708461 +0000 UTC m=+430.271665817 I0601 03:36:03.642468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:36:03.688413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:39:14.354876 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0601 03:39:14.355256 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-01 03:39:14.355232713 +0000 UTC m=+621.006190079 I0601 03:39:14.354979 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-01 03:39:14.354967274 +0000 UTC m=+621.005924640 I0601 03:39:14.374910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:39:14.375014 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-01 03:39:14.3750048 +0000 UTC m=+621.025962186 I0601 03:39:14.532324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:39:14.562267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-695vj" condition "Approved" to 2026-06-01 03:39:14.562256665 +0000 UTC m=+621.213214031 I0601 03:39:14.578684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-695vj" condition "Ready" to 2026-06-01 03:39:14.578675734 +0000 UTC m=+621.229633090 I0601 03:39:14.609644 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:39:14.609632906 +0000 UTC m=+621.260590282 I0601 03:39:14.643190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:39:14.643634 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:39:14.643627555 +0000 UTC m=+621.294584921 I0601 03:39:14.654776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:39:14.657016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0601 03:39:14.657456 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-01 03:39:14.657445802 +0000 UTC m=+621.308403188 I0601 03:39:14.663263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"