I0703 15:48:00.727527 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0703 15:48:00.727849 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0703 15:48:00.731809 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0703 15:48:00.731830 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0703 15:48:00.731841 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0703 15:48:00.732325 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0703 15:48:00.732358 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0703 15:48:00.732483 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0703 15:48:00.735305 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0703 15:48:00.749440 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0703 15:48:00.752664 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0703 15:48:00.755101 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0703 15:48:00.755216 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0703 15:48:00.758016 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0703 15:48:00.763077 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0703 15:48:00.765661 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0703 15:48:00.768103 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0703 15:48:00.770495 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0703 15:48:00.773234 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0703 15:48:00.779610 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0703 15:48:00.782296 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0703 15:48:00.784507 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0703 15:48:00.786793 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0703 15:48:00.789085 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0703 15:48:00.789118 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0703 15:48:00.789125 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0703 15:48:00.789176 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0703 15:48:00.793395 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0703 15:48:00.796928 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0703 15:48:00.800400 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0703 15:48:00.803209 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0703 15:48:00.805611 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0703 15:48:00.805635 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0703 15:48:00.805973 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0703 15:48:00.808547 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:00.808626 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:00.808624 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:00.809655 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:00.810885 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:00.811083 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:00.831802 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:00.851824 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:00.871028 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:00.903710 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:00.904842 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0703 15:48:19.359577 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-03 15:48:19.359536337 +0000 UTC m=+18.659029966 I0703 15:48:20.132342 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:48:20.132513 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-03 15:48:20.13250067 +0000 UTC m=+19.431994279 I0703 15:48:20.132667 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-03 15:48:20.132658175 +0000 UTC m=+19.432151784 I0703 15:48:20.215092 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:48:20.215266 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:48:20.215514 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-03 15:48:20.215385296 +0000 UTC m=+19.514878925 E0703 15:48:20.221232 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 15:48:20.221292 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-03 15:48:20.221287586 +0000 UTC m=+19.520781195 E0703 15:48:20.221350 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 15:48:20.268868 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0703 15:48:20.268969 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 15:48:20.269041 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 15:48:20.269097 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0703 15:48:20.618518 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:48:20.692228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-03 15:48:20.692214315 +0000 UTC m=+19.991707944 I0703 15:48:20.748411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-03 15:48:20.748396787 +0000 UTC m=+20.047890416 I0703 15:48:20.861007 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:48:20.860993987 +0000 UTC m=+20.160487616 I0703 15:48:20.879407 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:48:20.936196 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:48:25.270156 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:48:25.270137134 +0000 UTC m=+24.569630763 I0703 15:48:52.425357 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:48:52.425403 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-03 15:48:52.425397349 +0000 UTC m=+51.724890948 I0703 15:48:52.425692 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-03 15:48:52.425678537 +0000 UTC m=+51.725172136 I0703 15:48:52.468367 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:48:52.468440 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:48:52.469209 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-03 15:48:52.469202039 +0000 UTC m=+51.768695638 I0703 15:48:52.469504 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-03 15:48:52.469494636 +0000 UTC m=+51.768988235 I0703 15:48:52.727021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-03 15:48:52.727010746 +0000 UTC m=+52.026504355 I0703 15:48:52.750014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-03 15:48:52.749925123 +0000 UTC m=+52.049418742 I0703 15:48:52.771386 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:48:52.771375481 +0000 UTC m=+52.070869080 I0703 15:48:52.791943 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:48:52.792871 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:48:52.79284904 +0000 UTC m=+52.092342649 I0703 15:48:52.807369 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:48:52.812331 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:54:35.049654 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:54:35.049737 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-07-03 15:54:35.0497248 +0000 UTC m=+394.349218439 I0703 15:54:35.050690 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready" to 2026-07-03 15:54:35.050681133 +0000 UTC m=+394.350174772 I0703 15:54:35.062025 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:54:35.062106 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:54:35.062126 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-07-03 15:54:35.062119757 +0000 UTC m=+394.361613366 I0703 15:54:35.286252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-1" condition "Approved" to 2026-07-03 15:54:35.28623117 +0000 UTC m=+394.585724799 I0703 15:54:35.303723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-1" condition "Ready" to 2026-07-03 15:54:35.303707196 +0000 UTC m=+394.603200825 I0703 15:54:35.323339 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:54:35.32333014 +0000 UTC m=+394.622823739 I0703 15:54:35.335564 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:54:35.336152 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:54:35.336143392 +0000 UTC m=+394.635636991 I0703 15:54:35.343835 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:54:35.350057 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:55:40.692731 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:55:40.692789 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-03 15:55:40.692773865 +0000 UTC m=+459.992267554 I0703 15:55:40.693147 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-03 15:55:40.692552462 +0000 UTC m=+459.992046101 E0703 15:55:40.719516 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 15:55:40.719601 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-03 15:55:40.719590315 +0000 UTC m=+460.019083954 E0703 15:55:40.719628 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 15:55:40.719939 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:55:40.720034 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-03 15:55:40.72002421 +0000 UTC m=+460.019517819 E0703 15:55:40.739267 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0703 15:55:40.739341 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 15:55:40.739363 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 15:55:40.739392 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0703 15:55:40.762779 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:55:40.811921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-03 15:55:40.811902681 +0000 UTC m=+460.111396340 I0703 15:55:40.859974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-03 15:55:40.859957729 +0000 UTC m=+460.159451368 I0703 15:55:40.894320 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:55:40.894308169 +0000 UTC m=+460.193801778 I0703 15:55:40.923481 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:55:40.924106 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:55:40.924089768 +0000 UTC m=+460.223583397 I0703 15:55:40.938956 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:55:40.951928 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:55:45.740022 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:55:45.740012983 +0000 UTC m=+465.039506582 I0703 15:56:48.767241 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:56:48.767287 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-03 15:56:48.767281838 +0000 UTC m=+528.066775437 I0703 15:56:48.768280 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-03 15:56:48.768275203 +0000 UTC m=+528.067768802 I0703 15:56:48.768427 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:56:48.768444 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-03 15:56:48.768441079 +0000 UTC m=+528.067934678 I0703 15:56:48.768569 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-03 15:56:48.768566803 +0000 UTC m=+528.068060402 I0703 15:56:48.768833 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-03 15:56:48.768830372 +0000 UTC m=+528.068323971 I0703 15:56:48.768926 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:56:48.768943 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-03 15:56:48.768940476 +0000 UTC m=+528.068434065 I0703 15:56:48.956333 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:48.958016 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-03 15:56:48.958005663 +0000 UTC m=+528.257499272 I0703 15:56:48.959199 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:48.959439 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-03 15:56:48.959397482 +0000 UTC m=+528.258891111 I0703 15:56:48.955103 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:48.964180 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-03 15:56:48.964165517 +0000 UTC m=+528.263659116 I0703 15:56:49.264619 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:49.272612 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:49.384549 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:49.731024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-03 15:56:49.73100455 +0000 UTC m=+529.030498149 I0703 15:56:49.731365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-03 15:56:49.731343981 +0000 UTC m=+529.030837610 I0703 15:56:49.816024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-03 15:56:49.816004025 +0000 UTC m=+529.115497664 I0703 15:56:49.816536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-03 15:56:49.816525983 +0000 UTC m=+529.116019592 I0703 15:56:49.817458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-03 15:56:49.817446485 +0000 UTC m=+529.116940094 I0703 15:56:49.928043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-03 15:56:49.928029429 +0000 UTC m=+529.227523058 I0703 15:56:50.195242 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:56:50.195229894 +0000 UTC m=+529.494723503 I0703 15:56:50.195810 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:56:50.195804314 +0000 UTC m=+529.495297933 I0703 15:56:50.284455 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:50.287339 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:56:50.287331369 +0000 UTC m=+529.586824968 I0703 15:56:50.291804 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:56:50.291800414 +0000 UTC m=+529.591294013 I0703 15:56:50.301065 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:50.346517 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:50.347228 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:56:50.347217596 +0000 UTC m=+529.646711205 I0703 15:56:50.378766 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:50.414804 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:50.415736 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:56:50.440256 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:57:24.705160 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:57:24.705208 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" condition "Issuing" to 2026-07-03 15:57:24.705197505 +0000 UTC m=+564.004691134 I0703 15:57:24.705891 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" condition "Ready" to 2026-07-03 15:57:24.705874736 +0000 UTC m=+564.005368345 I0703 15:57:24.720066 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:57:24.720162 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" condition "Ready" to 2026-07-03 15:57:24.720152617 +0000 UTC m=+564.019646216 I0703 15:57:24.939993 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:57:24.970142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls-1" condition "Approved" to 2026-07-03 15:57:24.97012979 +0000 UTC m=+564.269623399 I0703 15:57:24.986880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls-1" condition "Ready" to 2026-07-03 15:57:24.98686341 +0000 UTC m=+564.286357059 I0703 15:57:25.017130 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:57:25.017113315 +0000 UTC m=+564.316606944 I0703 15:57:25.034061 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:57:25.034690 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:57:25.034683771 +0000 UTC m=+564.334177380 I0703 15:57:25.048079 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:57:25.048701 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:57:25.048691202 +0000 UTC m=+564.348184801 I0703 15:57:25.050921 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n7x8f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:58:07.678971 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-03 15:58:07.678941086 +0000 UTC m=+606.978434685 I0703 15:58:07.679401 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:58:07.679419 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-03 15:58:07.67941594 +0000 UTC m=+606.978909539 I0703 15:58:07.702633 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:58:07.702901 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 15:58:07.702959 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-03 15:58:07.702944907 +0000 UTC m=+607.002438546 I0703 15:58:08.043901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-03 15:58:08.04388009 +0000 UTC m=+607.343373719 I0703 15:58:08.069971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-03 15:58:08.069960021 +0000 UTC m=+607.369453620 I0703 15:58:08.108629 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:58:08.108614353 +0000 UTC m=+607.408107952 I0703 15:58:08.130165 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 15:58:08.130621 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:58:08.130612833 +0000 UTC m=+607.430106422 I0703 15:58:08.154094 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 16:01:12.004716 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-03 16:01:12.004701823 +0000 UTC m=+791.304195452 I0703 16:01:12.005211 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 16:01:12.005323 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-03 16:01:12.005311466 +0000 UTC m=+791.304805125 I0703 16:01:12.061823 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 16:01:12.061917 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 16:01:12.062126 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-03 16:01:12.062113936 +0000 UTC m=+791.361607555 I0703 16:01:12.256003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-03 16:01:12.255993626 +0000 UTC m=+791.555487235 I0703 16:01:12.277269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-03 16:01:12.277255547 +0000 UTC m=+791.576749176 I0703 16:01:12.336688 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 16:01:12.336674405 +0000 UTC m=+791.636168034 I0703 16:01:12.372248 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 16:01:12.429399 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 16:02:10.213612 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 16:02:10.213655 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-03 16:02:10.213643911 +0000 UTC m=+849.513137550 I0703 16:02:10.214009 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-03 16:02:10.213994938 +0000 UTC m=+849.513488547 I0703 16:02:10.230973 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 16:02:10.231050 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-03 16:02:10.231042202 +0000 UTC m=+849.530535801 I0703 16:02:10.535242 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 16:02:10.564756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-03 16:02:10.564744437 +0000 UTC m=+849.864238036 I0703 16:02:10.582711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-03 16:02:10.58270165 +0000 UTC m=+849.882195249 I0703 16:02:10.608670 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 16:02:10.608660809 +0000 UTC m=+849.908154408 I0703 16:02:10.626833 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 16:02:10.627457 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 16:02:10.627448138 +0000 UTC m=+849.926941747 I0703 16:02:10.644709 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"