I0602 17:22:49.812696 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0602 17:22:49.812789 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0602 17:22:49.812888 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0602 17:22:49.820312 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0602 17:22:49.820957 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0602 17:22:49.821124 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0602 17:22:49.821280 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0602 17:22:49.823959 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0602 17:22:49.843263 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0602 17:22:49.849951 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0602 17:22:49.857097 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0602 17:22:49.857210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0602 17:22:49.861976 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0602 17:22:49.862093 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0602 17:22:49.864781 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0602 17:22:49.867509 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0602 17:22:49.870629 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0602 17:22:49.872614 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0602 17:22:49.872637 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0602 17:22:49.872647 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0602 17:22:49.872676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0602 17:22:49.874692 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0602 17:22:49.877540 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0602 17:22:49.879035 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0602 17:22:49.881744 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0602 17:22:49.883793 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0602 17:22:49.885728 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0602 17:22:49.887663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0602 17:22:49.889531 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0602 17:22:49.891364 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0602 17:22:49.893158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0602 17:22:49.895297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0602 17:22:49.898932 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0602 17:22:49.902545 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:49.903093 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:49.904103 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:49.928814 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:49.942214 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:49.958665 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:49.975958 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:49.992781 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:49.994130 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:22:50.011687 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0602 17:23:07.074529 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-02 17:23:07.074512936 +0000 UTC m=+17.292690806 I0602 17:23:07.884929 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-02 17:23:07.884917133 +0000 UTC m=+18.103094973 I0602 17:23:07.885063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:23:07.885127 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-02 17:23:07.885116887 +0000 UTC m=+18.103294757 E0602 17:23:07.898914 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 17:23:07.899020 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-02 17:23:07.899010217 +0000 UTC m=+18.117188107 E0602 17:23:07.899078 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 17:23:07.909070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:23:07.909144 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:23:07.909167 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-02 17:23:07.90916012 +0000 UTC m=+18.127337960 E0602 17:23:07.911551 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0602 17:23:07.911697 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:23:07.911776 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:23:07.911859 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0602 17:23:07.949599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-n8p6z" condition "Approved" to 2026-06-02 17:23:07.949581497 +0000 UTC m=+18.167759337 I0602 17:23:07.952490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:23:07.959979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-n8p6z" condition "Ready" to 2026-06-02 17:23:07.959970575 +0000 UTC m=+18.178148415 I0602 17:23:07.987621 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:23:07.98760794 +0000 UTC m=+18.205785780 I0602 17:23:08.006617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:23:08.006898 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:23:08.006890893 +0000 UTC m=+18.225068753 I0602 17:23:08.021447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:23:08.026634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:23:12.912215 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:23:12.912186983 +0000 UTC m=+23.130364843 I0602 17:23:34.967968 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:23:34.968000 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-02 17:23:34.967991858 +0000 UTC m=+45.186169698 I0602 17:23:34.968509 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-02 17:23:34.968491958 +0000 UTC m=+45.186669798 I0602 17:23:34.989809 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-02 17:23:34.989797122 +0000 UTC m=+45.207974972 I0602 17:23:34.995124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:23:34.995205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:23:34.995281 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-02 17:23:34.995273313 +0000 UTC m=+45.213451173 I0602 17:23:35.180715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-scm9l" condition "Approved" to 2026-06-02 17:23:35.180700975 +0000 UTC m=+45.398878805 I0602 17:23:35.211979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-scm9l" condition "Ready" to 2026-06-02 17:23:35.211967098 +0000 UTC m=+45.430144938 I0602 17:23:35.247393 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:23:35.247379508 +0000 UTC m=+45.465557348 I0602 17:23:35.278876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:27:54.085016 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready" to 2026-06-02 17:27:54.084963098 +0000 UTC m=+304.303140938 I0602 17:27:54.085817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:27:54.085839 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Issuing" to 2026-06-02 17:27:54.085834996 +0000 UTC m=+304.304012836 I0602 17:27:54.108559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:27:54.108624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:27:54.108643 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Issuing" to 2026-06-02 17:27:54.108635553 +0000 UTC m=+304.326813403 I0602 17:27:54.288663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:27:54.295407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-gtwbd" condition "Approved" to 2026-06-02 17:27:54.295387006 +0000 UTC m=+304.513564876 I0602 17:27:54.325827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-gtwbd" condition "Ready" to 2026-06-02 17:27:54.325806243 +0000 UTC m=+304.543984083 I0602 17:27:54.351617 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:27:54.351599003 +0000 UTC m=+304.569776843 I0602 17:27:54.370360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:27:54.370650 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:27:54.370642762 +0000 UTC m=+304.588820602 I0602 17:27:54.389194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:27:54.392841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:00.883269 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-02 17:29:00.883248598 +0000 UTC m=+371.101426468 I0602 17:29:00.883499 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:29:00.883555 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-02 17:29:00.883543123 +0000 UTC m=+371.101720983 I0602 17:29:00.895573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:00.896037 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:29:00.896075 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-02 17:29:00.896066491 +0000 UTC m=+371.114244391 E0602 17:29:00.899106 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0602 17:29:00.899199 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-02 17:29:00.899130615 +0000 UTC m=+371.117308465 E0602 17:29:00.899258 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:29:00.910103 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0602 17:29:00.910190 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:29:00.910215 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0602 17:29:00.910250 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0602 17:29:00.931585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:00.937448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-js8z4" condition "Approved" to 2026-06-02 17:29:00.937436684 +0000 UTC m=+371.155614534 I0602 17:29:00.949044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-js8z4" condition "Ready" to 2026-06-02 17:29:00.949032696 +0000 UTC m=+371.167210546 I0602 17:29:00.970021 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:00.970005513 +0000 UTC m=+371.188183353 I0602 17:29:00.984501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:00.984712 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:00.984705119 +0000 UTC m=+371.202882959 I0602 17:29:00.991031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:00.997862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:00.998228 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:00.998219585 +0000 UTC m=+371.216397425 I0602 17:29:05.910954 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:05.910917469 +0000 UTC m=+376.129095309 I0602 17:29:50.016857 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-02 17:29:50.016814729 +0000 UTC m=+420.234992559 I0602 17:29:50.018126 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:29:50.018140 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-02 17:29:50.01813729 +0000 UTC m=+420.236315110 I0602 17:29:50.018352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:29:50.018362 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-02 17:29:50.018359623 +0000 UTC m=+420.236537453 I0602 17:29:50.018493 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-02 17:29:50.018490196 +0000 UTC m=+420.236668026 I0602 17:29:50.024279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:29:50.024302 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-02 17:29:50.024298218 +0000 UTC m=+420.242476048 I0602 17:29:50.024731 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-02 17:29:50.024727664 +0000 UTC m=+420.242905494 I0602 17:29:50.083563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:50.083627 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-02 17:29:50.083621524 +0000 UTC m=+420.301799354 I0602 17:29:50.083712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:50.083763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:29:50.083784 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-02 17:29:50.083779207 +0000 UTC m=+420.301957057 I0602 17:29:50.084804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:50.084839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:29:50.084851 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-02 17:29:50.084847013 +0000 UTC m=+420.303024853 I0602 17:29:50.474703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:50.509911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bklcp" condition "Approved" to 2026-06-02 17:29:50.509898702 +0000 UTC m=+420.728076542 I0602 17:29:50.526839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bklcp" condition "Ready" to 2026-06-02 17:29:50.52683015 +0000 UTC m=+420.745007980 I0602 17:29:50.530749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hfmk7" condition "Approved" to 2026-06-02 17:29:50.530740361 +0000 UTC m=+420.748918201 I0602 17:29:50.547697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hfmk7" condition "Ready" to 2026-06-02 17:29:50.547685698 +0000 UTC m=+420.765863538 I0602 17:29:50.552526 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:50.552521455 +0000 UTC m=+420.770699285 I0602 17:29:50.599717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:50.600082 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:50.600076626 +0000 UTC m=+420.818254456 I0602 17:29:50.664437 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:50.664424011 +0000 UTC m=+420.882601841 I0602 17:29:50.704656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:50.705027 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:50.705019433 +0000 UTC m=+420.923197263 I0602 17:29:50.714980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:50.723834 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:50.723824969 +0000 UTC m=+420.942002809 I0602 17:29:50.746808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:50.747406 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:50.747392301 +0000 UTC m=+420.965570161 I0602 17:29:50.747970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:51.001101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:51.053842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cqwjq" condition "Approved" to 2026-06-02 17:29:51.053822937 +0000 UTC m=+421.272000797 I0602 17:29:51.364287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cqwjq" condition "Ready" to 2026-06-02 17:29:51.364268468 +0000 UTC m=+421.582446328 I0602 17:29:51.601164 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:51.601151592 +0000 UTC m=+421.819329432 I0602 17:29:51.703957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:51.704409 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:51.704401948 +0000 UTC m=+421.922579788 I0602 17:29:51.900602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:59.468316 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gf89d-tls" condition "Ready" to 2026-06-02 17:29:59.468300296 +0000 UTC m=+429.686478136 I0602 17:29:59.468713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gf89d-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:29:59.468765 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gf89d-tls" condition "Issuing" to 2026-06-02 17:29:59.468753613 +0000 UTC m=+429.686931483 I0602 17:29:59.484506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gf89d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gf89d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:59.484569 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gf89d-tls" condition "Ready" to 2026-06-02 17:29:59.484559829 +0000 UTC m=+429.702737669 I0602 17:29:59.733873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gf89d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gf89d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:29:59.767049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gf89d-s8m4t" condition "Approved" to 2026-06-02 17:29:59.76703891 +0000 UTC m=+429.985216740 I0602 17:29:59.788712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gf89d-s8m4t" condition "Ready" to 2026-06-02 17:29:59.788700297 +0000 UTC m=+430.006878137 I0602 17:29:59.837042 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gf89d-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:29:59.837026188 +0000 UTC m=+430.055204008 I0602 17:29:59.874957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gf89d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gf89d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:00.033363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gf89d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gf89d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:11.293636 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-02 17:30:11.293604385 +0000 UTC m=+441.511782225 I0602 17:30:11.293987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:30:11.294029 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-02 17:30:11.294014131 +0000 UTC m=+441.512191961 I0602 17:30:11.308368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:11.308483 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-02 17:30:11.308476681 +0000 UTC m=+441.526654521 I0602 17:30:11.786592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:11.825866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zm5sg" condition "Approved" to 2026-06-02 17:30:11.825849015 +0000 UTC m=+442.044026855 I0602 17:30:11.851102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zm5sg" condition "Ready" to 2026-06-02 17:30:11.85109143 +0000 UTC m=+442.069269270 I0602 17:30:11.899753 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:30:11.899742293 +0000 UTC m=+442.117920113 I0602 17:30:11.917614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:30:11.981208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:33:26.835320 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-02 17:33:26.835291002 +0000 UTC m=+637.053468832 I0602 17:33:26.835790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:33:26.835895 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-02 17:33:26.835837779 +0000 UTC m=+637.054015639 I0602 17:33:26.852999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:33:26.853065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:33:26.853084 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-02 17:33:26.853076302 +0000 UTC m=+637.071254142 I0602 17:33:27.025443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-q7vn5" condition "Approved" to 2026-06-02 17:33:27.025430593 +0000 UTC m=+637.243608433 I0602 17:33:27.042886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-q7vn5" condition "Ready" to 2026-06-02 17:33:27.042875988 +0000 UTC m=+637.261053818 I0602 17:33:27.075109 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:33:27.075093185 +0000 UTC m=+637.293271035 I0602 17:33:27.101096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:34:05.027482 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-02 17:34:05.027456766 +0000 UTC m=+675.245634606 I0602 17:34:05.027607 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:34:05.027640 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-02 17:34:05.027632418 +0000 UTC m=+675.245810258 I0602 17:34:05.060124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:34:05.060207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0602 17:34:05.060224 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-02 17:34:05.060218535 +0000 UTC m=+675.278396365 I0602 17:34:05.258986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-g86g7" condition "Approved" to 2026-06-02 17:34:05.258966734 +0000 UTC m=+675.477144574 I0602 17:34:05.280079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-g86g7" condition "Ready" to 2026-06-02 17:34:05.280064684 +0000 UTC m=+675.498242514 I0602 17:34:05.305853 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-02 17:34:05.305836783 +0000 UTC m=+675.524014613 I0602 17:34:05.324969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0602 17:34:05.381233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"