I0602 17:22:37.714916 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0602 17:22:37.715047 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0602 17:22:37.715252 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0602 17:22:37.720385 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0602 17:22:37.720733 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0602 17:22:37.720848 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0602 17:22:37.720860 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0602 17:22:37.723324 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0602 17:22:37.861372 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0602 17:22:37.867587 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0602 17:22:37.872463 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0602 17:22:37.876184 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0602 17:22:37.880057 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0602 17:22:37.883864 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0602 17:22:37.883927 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0602 17:22:37.883968 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0602 17:22:37.888204 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0602 17:22:37.888280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0602 17:22:37.888228 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0602 17:22:37.891656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0602 17:22:37.898011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0602 17:22:37.902458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0602 17:22:37.903933 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0602 17:22:37.904017 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0602 17:22:37.906630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0602 17:22:37.909288 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0602 17:22:37.911729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0602 17:22:37.914340 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0602 17:22:37.914370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0602 17:22:37.916481 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0602 17:22:37.918616 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0602 17:22:37.924486 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0602 17:22:37.927603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0602 17:22:37.929459 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:37.929735 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:37.929744 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:37.930410 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:37.947755 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:37.966746 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:37.980873 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:37.995674 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:38.013749 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:38.023487 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:53.447992 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-02 17:22:53.447975699 +0000 UTC m=+15.763867010 I0602 17:22:54.466228 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-02 17:22:54.466208397 +0000 UTC m=+16.782099708 I0602 17:22:54.466532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:22:54.466611 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-02 17:22:54.466597645 +0000 UTC m=+16.782488956 I0602 17:22:54.597979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:22:54.598076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:22:54.598102 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-02 17:22:54.598092806 +0000 UTC m=+16.913984127 E0602 17:22:54.602113 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 17:22:54.602202 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-02 17:22:54.602193872 +0000 UTC m=+16.918085193 E0602 17:22:54.602236 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:22:54.700602 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0602 17:22:54.700745 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:22:54.700795 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:22:54.700844 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0602 17:22:54.735829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:22:54.742695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4hbbm" condition "Approved" to 2026-06-02 17:22:54.74268212 +0000 UTC m=+17.058573401 I0602 17:22:54.754292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4hbbm" condition "Ready" to 2026-06-02 17:22:54.754280842 +0000 UTC m=+17.070172133 I0602 17:22:54.779588 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:22:54.779576609 +0000 UTC m=+17.095467900 I0602 17:22:54.799794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:22:54.846848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:22:59.702673 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:22:59.701542471 +0000 UTC m=+22.017433752 I0602 17:23:23.115502 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-02 17:23:23.115487336 +0000 UTC m=+45.431378627 I0602 17:23:23.115729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:23:23.115756 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-02 17:23:23.11575212 +0000 UTC m=+45.431643411 I0602 17:23:23.133809 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-02 17:23:23.133799378 +0000 UTC m=+45.449690659 I0602 17:23:23.138712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:23:23.138875 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-02 17:23:23.138865199 +0000 UTC m=+45.454756490 I0602 17:23:23.287260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:23:23.332962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qj54h" condition "Approved" to 2026-06-02 17:23:23.332949517 +0000 UTC m=+45.648840808 I0602 17:23:23.366496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qj54h" condition "Ready" to 2026-06-02 17:23:23.366483163 +0000 UTC m=+45.682374464 I0602 17:23:23.400485 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:23:23.400468567 +0000 UTC m=+45.716359858 I0602 17:23:23.422519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:28:11.895722 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Ready" to 2026-06-02 17:28:11.895698222 +0000 UTC m=+334.211589533 I0602 17:28:11.895758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-30.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:28:11.895950 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Issuing" to 2026-06-02 17:28:11.895935207 +0000 UTC m=+334.211826548 I0602 17:28:11.923597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:28:11.923670 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Ready" to 2026-06-02 17:28:11.923663754 +0000 UTC m=+334.239555065 I0602 17:28:12.159723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:28:12.187072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-30.nip.io-tls-2954h" condition "Approved" to 2026-06-02 17:28:12.18705084 +0000 UTC m=+334.502942131 I0602 17:28:12.211181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-30.nip.io-tls-2954h" condition "Ready" to 2026-06-02 17:28:12.211169927 +0000 UTC m=+334.527061218 I0602 17:28:12.235062 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:28:12.235055452 +0000 UTC m=+334.550946743 I0602 17:28:12.254565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:28:12.254791 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:28:12.254787088 +0000 UTC m=+334.570678379 I0602 17:28:12.269802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:19.116985 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-02 17:29:19.116962542 +0000 UTC m=+401.432853853 I0602 17:29:19.117098 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:29:19.117146 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-02 17:29:19.117136105 +0000 UTC m=+401.433027386 I0602 17:29:19.133416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:19.133464 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-02 17:29:19.133459499 +0000 UTC m=+401.449350780 E0602 17:29:19.135448 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 17:29:19.135474 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-02 17:29:19.135468852 +0000 UTC m=+401.451360133 E0602 17:29:19.135505 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:29:19.149289 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0602 17:29:19.151056 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:29:19.151085 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:29:19.151116 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0602 17:29:19.155123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:19.155265 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-02 17:29:19.155254145 +0000 UTC m=+401.471145456 I0602 17:29:19.158614 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hzrvp" condition "Approved" to 2026-06-02 17:29:19.158605322 +0000 UTC m=+401.474496593 I0602 17:29:19.171770 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-02 17:29:19.171755212 +0000 UTC m=+401.487646503 I0602 17:29:19.173032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hzrvp" condition "Ready" to 2026-06-02 17:29:19.172999213 +0000 UTC m=+401.488890514 I0602 17:29:19.179763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:19.207519 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:19.207494511 +0000 UTC m=+401.523385832 I0602 17:29:19.230371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:19.230727 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:19.230716992 +0000 UTC m=+401.546608303 I0602 17:29:19.246630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:19.246993 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:19.246980175 +0000 UTC m=+401.562871496 I0602 17:29:19.252543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:24.152295 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:24.152280364 +0000 UTC m=+406.468171675 I0602 17:30:07.676285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:30:07.676364 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-02 17:30:07.676356864 +0000 UTC m=+449.992248145 I0602 17:30:07.676811 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-02 17:30:07.6768074 +0000 UTC m=+449.992698681 I0602 17:30:07.676875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:30:07.679270 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-02 17:30:07.679253427 +0000 UTC m=+449.995144718 I0602 17:30:07.676972 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-02 17:30:07.676969092 +0000 UTC m=+449.992860363 I0602 17:30:07.720576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:30:07.720615 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-02 17:30:07.72060734 +0000 UTC m=+450.036498621 I0602 17:30:07.721249 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-02 17:30:07.72123831 +0000 UTC m=+450.037129591 I0602 17:30:07.774458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:07.774541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:30:07.774563 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-02 17:30:07.774557022 +0000 UTC m=+450.090448303 I0602 17:30:07.782291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:07.782340 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-02 17:30:07.782335008 +0000 UTC m=+450.098226289 I0602 17:30:07.871657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:07.871917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:30:07.872005 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-02 17:30:07.871998749 +0000 UTC m=+450.187890040 I0602 17:30:08.131518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-prnh4" condition "Approved" to 2026-06-02 17:30:08.131503097 +0000 UTC m=+450.447394388 I0602 17:30:08.145535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:08.155910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-prnh4" condition "Ready" to 2026-06-02 17:30:08.155896198 +0000 UTC m=+450.471787489 I0602 17:30:08.179038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rbwm8" condition "Approved" to 2026-06-02 17:30:08.179024411 +0000 UTC m=+450.494915702 I0602 17:30:08.196766 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:30:08.196750824 +0000 UTC m=+450.512642115 I0602 17:30:08.205232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rbwm8" condition "Ready" to 2026-06-02 17:30:08.205216719 +0000 UTC m=+450.521108010 I0602 17:30:08.214834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qdlrg" condition "Approved" to 2026-06-02 17:30:08.214823901 +0000 UTC m=+450.530715192 I0602 17:30:08.232092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:08.244773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qdlrg" condition "Ready" to 2026-06-02 17:30:08.244755395 +0000 UTC m=+450.560646686 I0602 17:30:08.396888 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:30:08.396860867 +0000 UTC m=+450.712752178 I0602 17:30:08.646211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0602 17:30:08.690360 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-5wlxx\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0602 17:30:08.761282 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:30:08.761271136 +0000 UTC m=+451.077162427 I0602 17:30:08.995398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:08.995934 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:30:08.995925661 +0000 UTC m=+451.311816952 I0602 17:30:09.392105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:17.920448 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" condition "Ready" to 2026-06-02 17:30:17.92043065 +0000 UTC m=+460.236321941 I0602 17:30:17.920993 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:30:17.921040 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" condition "Issuing" to 2026-06-02 17:30:17.92102972 +0000 UTC m=+460.236921001 I0602 17:30:17.936555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z87b7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:17.936638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:30:17.936664 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" condition "Issuing" to 2026-06-02 17:30:17.936657307 +0000 UTC m=+460.252548598 I0602 17:30:18.122972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z87b7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:18.139473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-z87b7-kfn84" condition "Approved" to 2026-06-02 17:30:18.139452578 +0000 UTC m=+460.455343889 I0602 17:30:18.159389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-z87b7-kfn84" condition "Ready" to 2026-06-02 17:30:18.159377727 +0000 UTC m=+460.475269008 I0602 17:30:18.192281 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:30:18.192260764 +0000 UTC m=+460.508152085 I0602 17:30:18.216586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z87b7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:18.218330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z87b7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:18.218644 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:30:18.218634766 +0000 UTC m=+460.534526057 I0602 17:30:18.232659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z87b7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:18.243576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z87b7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:18.243947 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z87b7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:30:18.243940572 +0000 UTC m=+460.559831863 I0602 17:30:33.404176 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-02 17:30:33.404155271 +0000 UTC m=+475.720046552 I0602 17:30:33.404220 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:30:33.404249 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-02 17:30:33.404242252 +0000 UTC m=+475.720133533 I0602 17:30:33.423716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:33.423809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:30:33.423837 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-02 17:30:33.423827607 +0000 UTC m=+475.739718938 I0602 17:30:33.751178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c2pm5" condition "Approved" to 2026-06-02 17:30:33.751161511 +0000 UTC m=+476.067052802 I0602 17:30:33.769438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c2pm5" condition "Ready" to 2026-06-02 17:30:33.769426318 +0000 UTC m=+476.085317599 I0602 17:30:33.807888 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:30:33.807872909 +0000 UTC m=+476.123764200 I0602 17:30:33.828685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:33.906243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:33:55.513927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:33:55.514146 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-02 17:33:55.514129907 +0000 UTC m=+677.830021198 I0602 17:33:55.513974 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-02 17:33:55.513963355 +0000 UTC m=+677.829854676 I0602 17:33:55.536314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:33:55.536388 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-02 17:33:55.536380479 +0000 UTC m=+677.852271790 I0602 17:33:55.894906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:33:55.922775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2gkt2" condition "Approved" to 2026-06-02 17:33:55.922762007 +0000 UTC m=+678.238653308 I0602 17:33:55.964915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2gkt2" condition "Ready" to 2026-06-02 17:33:55.964900344 +0000 UTC m=+678.280791615 I0602 17:33:56.000457 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:33:56.000441815 +0000 UTC m=+678.316333126 I0602 17:33:56.023928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:33:56.081275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:34:38.917626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:34:38.917697 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-02 17:34:38.917688937 +0000 UTC m=+721.233580228 I0602 17:34:38.917991 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-02 17:34:38.91797573 +0000 UTC m=+721.233867011 I0602 17:34:38.957841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:34:38.958109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:34:38.958165 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-02 17:34:38.958157565 +0000 UTC m=+721.274048856 I0602 17:34:39.231586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bjdr2" condition "Approved" to 2026-06-02 17:34:39.231574731 +0000 UTC m=+721.547466022 I0602 17:34:39.256438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bjdr2" condition "Ready" to 2026-06-02 17:34:39.256421486 +0000 UTC m=+721.572312777 I0602 17:34:39.293636 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:34:39.293620189 +0000 UTC m=+721.609511480 I0602 17:34:39.323756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:34:39.324206 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:34:39.324197119 +0000 UTC m=+721.640088400 I0602 17:34:39.328744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:34:39.344237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"