I0612 01:18:01.616951 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0612 01:18:01.617064 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0612 01:18:01.617314 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0612 01:18:01.622885 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0612 01:18:01.623216 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0612 01:18:01.623276 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0612 01:18:01.623328 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0612 01:18:01.625127 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0612 01:18:01.638403 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0612 01:18:01.641474 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0612 01:18:01.644658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0612 01:18:01.647368 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0612 01:18:01.652211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0612 01:18:01.656010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0612 01:18:01.659029 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0612 01:18:01.661210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0612 01:18:01.663724 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0612 01:18:01.663896 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0612 01:18:01.666079 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0612 01:18:01.667842 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0612 01:18:01.671541 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0612 01:18:01.675115 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0612 01:18:01.675158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0612 01:18:01.679165 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0612 01:18:01.679234 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0612 01:18:01.682401 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0612 01:18:01.684108 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0612 01:18:01.685853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0612 01:18:01.687623 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0612 01:18:01.687665 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0612 01:18:01.687686 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0612 01:18:01.687724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0612 01:18:01.690008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0612 01:18:01.692041 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 01:18:01.693539 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 01:18:01.694308 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 01:18:01.694308 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 01:18:01.709548 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 01:18:01.719572 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 01:18:01.735350 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 01:18:01.748540 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 01:18:01.765989 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 01:18:01.778149 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0612 01:18:13.788362 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-12 01:18:13.788345502 +0000 UTC m=+12.199036706 I0612 01:18:14.489733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:18:14.489850 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-12 01:18:14.489818239 +0000 UTC m=+12.900509463 I0612 01:18:14.489993 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-12 01:18:14.489979632 +0000 UTC m=+12.900670816 E0612 01:18:14.503134 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 01:18:14.503176 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-12 01:18:14.503171165 +0000 UTC m=+12.913862359 E0612 01:18:14.503233 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 01:18:14.504347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:18:14.504492 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-12 01:18:14.504484534 +0000 UTC m=+12.915175728 E0612 01:18:14.517340 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0612 01:18:14.517556 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 01:18:14.517626 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 01:18:14.517665 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0612 01:18:14.526420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:18:14.526506 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-12 01:18:14.526499616 +0000 UTC m=+12.937190800 I0612 01:18:14.534845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2hk7b" condition "Approved" to 2026-06-12 01:18:14.534839888 +0000 UTC m=+12.945531082 I0612 01:18:14.545396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2hk7b" condition "Ready" to 2026-06-12 01:18:14.545389763 +0000 UTC m=+12.956080957 I0612 01:18:14.564551 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:18:14.564540773 +0000 UTC m=+12.975231977 I0612 01:18:14.580851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:18:14.581102 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:18:14.581096385 +0000 UTC m=+12.991787589 I0612 01:18:14.592650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:18:14.592861 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:18:14.592855307 +0000 UTC m=+13.003546501 I0612 01:18:19.517679 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:18:19.517669689 +0000 UTC m=+17.928360883 I0612 01:18:44.315924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:18:44.315955 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-12 01:18:44.315948981 +0000 UTC m=+42.726640175 I0612 01:18:44.317008 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-12 01:18:44.317003175 +0000 UTC m=+42.727694369 I0612 01:18:44.336807 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-12 01:18:44.336775264 +0000 UTC m=+42.747466498 I0612 01:18:44.348807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:18:44.348914 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-12 01:18:44.348908063 +0000 UTC m=+42.759599257 I0612 01:18:44.672158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:18:44.710028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v4z9k" condition "Approved" to 2026-06-12 01:18:44.7100095 +0000 UTC m=+43.120700704 I0612 01:18:44.744188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v4z9k" condition "Ready" to 2026-06-12 01:18:44.744172797 +0000 UTC m=+43.154864031 I0612 01:18:44.782974 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:18:44.782959745 +0000 UTC m=+43.193650979 I0612 01:18:44.805842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:18:44.857214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:23:06.051280 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-06-12 01:23:06.051232802 +0000 UTC m=+304.461924006 I0612 01:23:06.052007 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:23:06.052027 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-06-12 01:23:06.052022927 +0000 UTC m=+304.462714131 I0612 01:23:06.067298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:23:06.067343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:23:06.067360 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-06-12 01:23:06.067355432 +0000 UTC m=+304.478046636 I0612 01:23:06.449760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:23:06.459418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-6bgns" condition "Approved" to 2026-06-12 01:23:06.458847806 +0000 UTC m=+304.869539010 I0612 01:23:06.483175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-6bgns" condition "Ready" to 2026-06-12 01:23:06.483163344 +0000 UTC m=+304.893854548 I0612 01:23:06.505853 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:23:06.505840471 +0000 UTC m=+304.916531675 I0612 01:23:06.523935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:11.256724 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-12 01:24:11.256693969 +0000 UTC m=+369.667385193 I0612 01:24:11.256906 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:24:11.257164 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-12 01:24:11.257106966 +0000 UTC m=+369.667798240 E0612 01:24:11.267588 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0612 01:24:11.267708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:11.267769 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:24:11.267782 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-12 01:24:11.267777536 +0000 UTC m=+369.678468730 I0612 01:24:11.267730 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-12 01:24:11.267719065 +0000 UTC m=+369.678410269 E0612 01:24:11.268072 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 01:24:11.278202 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0612 01:24:11.278666 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 01:24:11.278696 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0612 01:24:11.278741 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0612 01:24:11.304862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4cmml" condition "Approved" to 2026-06-12 01:24:11.30482663 +0000 UTC m=+369.715517854 I0612 01:24:11.318651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4cmml" condition "Ready" to 2026-06-12 01:24:11.318645033 +0000 UTC m=+369.729336227 I0612 01:24:11.339940 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:24:11.339921021 +0000 UTC m=+369.750612255 I0612 01:24:11.358807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:11.359216 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:24:11.359207046 +0000 UTC m=+369.769898270 I0612 01:24:11.370377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:11.373711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:11.374019 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:24:11.374010346 +0000 UTC m=+369.784701550 I0612 01:24:16.279235 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:24:16.279227701 +0000 UTC m=+374.689918895 I0612 01:24:55.757978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:24:55.758006 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-12 01:24:55.758001059 +0000 UTC m=+414.168692243 I0612 01:24:55.758100 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-12 01:24:55.75809142 +0000 UTC m=+414.168782614 I0612 01:24:55.758110 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-12 01:24:55.75810354 +0000 UTC m=+414.168794744 I0612 01:24:55.761487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:24:55.762473 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-12 01:24:55.761515884 +0000 UTC m=+414.172207088 I0612 01:24:55.765407 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-12 01:24:55.765396465 +0000 UTC m=+414.176087659 I0612 01:24:55.765774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:24:55.765792 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-12 01:24:55.765789622 +0000 UTC m=+414.176480806 I0612 01:24:55.802612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:55.802674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:24:55.802694 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-12 01:24:55.802688765 +0000 UTC m=+414.213379969 I0612 01:24:55.802980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:55.803018 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-12 01:24:55.80301422 +0000 UTC m=+414.213705424 I0612 01:24:55.803201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:55.803233 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-12 01:24:55.803230343 +0000 UTC m=+414.213921547 I0612 01:24:56.009148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lsvv7" condition "Approved" to 2026-06-12 01:24:56.009134805 +0000 UTC m=+414.419826029 I0612 01:24:56.214910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lsvv7" condition "Ready" to 2026-06-12 01:24:56.214896311 +0000 UTC m=+414.625587545 I0612 01:24:56.321490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:56.321597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:56.384935 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:24:56.384927193 +0000 UTC m=+414.795618387 I0612 01:24:56.423517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:56.437671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kcgpb" condition "Approved" to 2026-06-12 01:24:56.437638115 +0000 UTC m=+414.848329319 I0612 01:24:56.446113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8z2cq" condition "Approved" to 2026-06-12 01:24:56.446102228 +0000 UTC m=+414.856793422 I0612 01:24:56.475707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8z2cq" condition "Ready" to 2026-06-12 01:24:56.475699965 +0000 UTC m=+414.886391159 I0612 01:24:56.478753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kcgpb" condition "Ready" to 2026-06-12 01:24:56.478741693 +0000 UTC m=+414.889432887 I0612 01:24:56.794875 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:24:56.79486363 +0000 UTC m=+415.205554824 I0612 01:24:56.840195 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:24:56.840178895 +0000 UTC m=+415.250870099 I0612 01:24:56.939692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:57.038192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:57.038721 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:24:57.038712026 +0000 UTC m=+415.449403250 I0612 01:24:57.338468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:24:57.753698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:25:06.084461 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls" condition "Ready" to 2026-06-12 01:25:06.084445522 +0000 UTC m=+424.495136726 I0612 01:25:06.085219 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:25:06.085241 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls" condition "Issuing" to 2026-06-12 01:25:06.085235715 +0000 UTC m=+424.495926919 I0612 01:25:06.102020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:25:06.102105 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls" condition "Ready" to 2026-06-12 01:25:06.102096667 +0000 UTC m=+424.512787871 I0612 01:25:06.266025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:25:06.307874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2xmwc-bgw6r" condition "Approved" to 2026-06-12 01:25:06.307860774 +0000 UTC m=+424.718551988 I0612 01:25:06.332042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2xmwc-bgw6r" condition "Ready" to 2026-06-12 01:25:06.332033821 +0000 UTC m=+424.742725015 I0612 01:25:06.362471 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:25:06.362461355 +0000 UTC m=+424.773152549 I0612 01:25:06.387081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2xmwc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:25:21.203658 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-12 01:25:21.203627101 +0000 UTC m=+439.614318325 I0612 01:25:21.203785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:25:21.203835 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-12 01:25:21.203825864 +0000 UTC m=+439.614517088 I0612 01:25:21.230977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:25:21.231116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:25:21.231169 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-12 01:25:21.231159293 +0000 UTC m=+439.641850527 I0612 01:25:21.598811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-l6g8d" condition "Approved" to 2026-06-12 01:25:21.598796657 +0000 UTC m=+440.009487881 I0612 01:25:21.684936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-l6g8d" condition "Ready" to 2026-06-12 01:25:21.684923616 +0000 UTC m=+440.095614810 I0612 01:25:21.758640 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:25:21.758630306 +0000 UTC m=+440.169321500 I0612 01:25:21.853356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:25:21.853891 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:25:21.853883265 +0000 UTC m=+440.264574479 I0612 01:25:21.886760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:28:36.725361 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:28:36.725455 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-12 01:28:36.725448399 +0000 UTC m=+635.136139593 I0612 01:28:36.725659 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-12 01:28:36.725638262 +0000 UTC m=+635.136329496 I0612 01:28:36.745412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:28:36.745516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:28:36.745548 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-12 01:28:36.745539724 +0000 UTC m=+635.156230948 I0612 01:28:37.138269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tc2t6" condition "Approved" to 2026-06-12 01:28:37.138260271 +0000 UTC m=+635.548951475 I0612 01:28:37.161940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tc2t6" condition "Ready" to 2026-06-12 01:28:37.161926354 +0000 UTC m=+635.572617568 I0612 01:28:37.193956 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:28:37.193943863 +0000 UTC m=+635.604635087 I0612 01:28:37.220331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:28:37.268723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:29:19.022255 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-12 01:29:19.022225624 +0000 UTC m=+677.432916858 I0612 01:29:19.022315 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:29:19.022514 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-12 01:29:19.022507384 +0000 UTC m=+677.433198608 I0612 01:29:19.039218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:29:19.039306 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0612 01:29:19.039343 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-12 01:29:19.039337192 +0000 UTC m=+677.450028406 I0612 01:29:19.301500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6fvb4" condition "Approved" to 2026-06-12 01:29:19.301483383 +0000 UTC m=+677.712174597 I0612 01:29:19.322740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6fvb4" condition "Ready" to 2026-06-12 01:29:19.322728233 +0000 UTC m=+677.733419437 I0612 01:29:19.352944 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:29:19.352928951 +0000 UTC m=+677.763620155 I0612 01:29:19.374506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:29:19.375025 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-12 01:29:19.375013611 +0000 UTC m=+677.785704815 I0612 01:29:19.379025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0612 01:29:19.402036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"