I0708 15:31:36.136452 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0708 15:31:36.136654 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0708 15:31:36.136871 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0708 15:31:36.142020 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0708 15:31:36.142701 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0708 15:31:36.142701 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0708 15:31:36.142970 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0708 15:31:36.147642 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0708 15:31:36.161745 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0708 15:31:36.168529 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0708 15:31:36.171064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0708 15:31:36.173611 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0708 15:31:36.178379 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0708 15:31:36.180169 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0708 15:31:36.180188 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0708 15:31:36.180196 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0708 15:31:36.180348 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0708 15:31:36.182110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0708 15:31:36.183847 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0708 15:31:36.185494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0708 15:31:36.187272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0708 15:31:36.188919 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0708 15:31:36.195836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0708 15:31:36.200238 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0708 15:31:36.203019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0708 15:31:36.205675 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0708 15:31:36.208414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0708 15:31:36.210423 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0708 15:31:36.210460 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0708 15:31:36.210469 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0708 15:31:36.210537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0708 15:31:36.212634 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0708 15:31:36.215741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0708 15:31:36.219365 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 15:31:36.221384 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 15:31:36.221522 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 15:31:36.247642 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 15:31:36.262008 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 15:31:36.275819 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 15:31:36.295337 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 15:31:36.306110 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 15:31:36.313837 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 15:31:36.335653 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 15:31:55.012905 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-08 15:31:55.012891724 +0000 UTC m=+18.906801181 I0708 15:31:55.773487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:31:55.773530 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-08 15:31:55.773522021 +0000 UTC m=+19.667431488 I0708 15:31:55.773887 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 15:31:55.773875656 +0000 UTC m=+19.667785123 E0708 15:31:55.788765 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 15:31:55.788825 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-08 15:31:55.788818305 +0000 UTC m=+19.682727772 E0708 15:31:55.788848 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 15:31:55.793096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:31:55.793175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:31:55.793195 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-08 15:31:55.793188426 +0000 UTC m=+19.687097893 E0708 15:31:55.800120 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0708 15:31:55.800201 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 15:31:55.800223 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 15:31:55.800251 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0708 15:31:55.830109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wtp7w" condition "Approved" to 2026-07-08 15:31:55.830101347 +0000 UTC m=+19.724010794 I0708 15:31:55.842712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wtp7w" condition "Ready" to 2026-07-08 15:31:55.84269517 +0000 UTC m=+19.736604647 I0708 15:31:55.865109 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:31:55.865100339 +0000 UTC m=+19.759009806 I0708 15:31:55.882239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:31:55.924747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:32:00.801526 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:32:00.801512467 +0000 UTC m=+24.695421964 I0708 15:32:28.545802 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-08 15:32:28.545751922 +0000 UTC m=+52.439661409 I0708 15:32:28.546657 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:32:28.546769 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 15:32:28.546760806 +0000 UTC m=+52.440670293 I0708 15:32:28.558386 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-08 15:32:28.558375665 +0000 UTC m=+52.452285122 I0708 15:32:28.578925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:32:28.578997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:32:28.579022 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 15:32:28.579016978 +0000 UTC m=+52.472926435 I0708 15:32:29.250319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rvl55" condition "Approved" to 2026-07-08 15:32:29.250307484 +0000 UTC m=+53.144216941 I0708 15:32:29.288285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rvl55" condition "Ready" to 2026-07-08 15:32:29.288274193 +0000 UTC m=+53.182183660 I0708 15:32:29.319781 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:32:29.319767464 +0000 UTC m=+53.213676951 I0708 15:32:29.344145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:32:29.344468 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:32:29.344462531 +0000 UTC m=+53.238371988 I0708 15:32:29.350192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:32:29.364566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:32:29.367560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:32:29.367974 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:32:29.367964572 +0000 UTC m=+53.261874039 I0708 15:37:27.678217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-227.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:37:27.678263 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Issuing" to 2026-07-08 15:37:27.67825375 +0000 UTC m=+351.572163237 I0708 15:37:27.679035 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready" to 2026-07-08 15:37:27.679025163 +0000 UTC m=+351.572934650 I0708 15:37:27.698652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:37:27.698724 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready" to 2026-07-08 15:37:27.698717065 +0000 UTC m=+351.592626532 I0708 15:37:27.830226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:37:27.864137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-227.nip.io-tls-kj4hg" condition "Approved" to 2026-07-08 15:37:27.864120925 +0000 UTC m=+351.758030412 I0708 15:37:27.893587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-227.nip.io-tls-kj4hg" condition "Ready" to 2026-07-08 15:37:27.893575757 +0000 UTC m=+351.787485224 I0708 15:37:27.916313 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:37:27.916300271 +0000 UTC m=+351.810209758 I0708 15:37:27.937868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:37:27.938338 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:37:27.938331254 +0000 UTC m=+351.832240721 I0708 15:37:27.956426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:38:34.141476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:38:34.141546 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-08 15:38:34.141530015 +0000 UTC m=+418.035439502 I0708 15:38:34.141578 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 15:38:34.141566796 +0000 UTC m=+418.035476293 E0708 15:38:34.160637 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 15:38:34.160698 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-08 15:38:34.160688823 +0000 UTC m=+418.054598300 E0708 15:38:34.160755 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 15:38:34.162150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:38:34.162381 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:38:34.162533 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 15:38:34.16241321 +0000 UTC m=+418.056322677 E0708 15:38:34.172036 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0708 15:38:34.172336 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 15:38:34.172411 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 15:38:34.173506 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0708 15:38:34.198882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xbtmq" condition "Approved" to 2026-07-08 15:38:34.198868285 +0000 UTC m=+418.092777752 I0708 15:38:34.211022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xbtmq" condition "Ready" to 2026-07-08 15:38:34.211009023 +0000 UTC m=+418.104918490 I0708 15:38:34.234856 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:38:34.234844542 +0000 UTC m=+418.128754009 I0708 15:38:34.253661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:38:34.294005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:38:39.173140 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:38:39.173127036 +0000 UTC m=+423.067036533 I0708 15:39:20.052064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:39:20.052186 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 15:39:20.052174898 +0000 UTC m=+463.946084355 I0708 15:39:20.052601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:39:20.052623 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 15:39:20.052620854 +0000 UTC m=+463.946530301 I0708 15:39:20.052169 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-08 15:39:20.052161308 +0000 UTC m=+463.946070785 I0708 15:39:20.052680 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-08 15:39:20.052669285 +0000 UTC m=+463.946578772 I0708 15:39:20.052848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:39:20.058738 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-08 15:39:20.058718553 +0000 UTC m=+463.952628030 I0708 15:39:20.052888 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 15:39:20.052869978 +0000 UTC m=+463.946779435 I0708 15:39:20.178776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:20.179437 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 15:39:20.179431929 +0000 UTC m=+464.073341386 I0708 15:39:20.184614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:20.184664 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-08 15:39:20.184658826 +0000 UTC m=+464.078568283 I0708 15:39:20.184658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:20.184727 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 15:39:20.184720657 +0000 UTC m=+464.078630114 I0708 15:39:20.463877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:20.482875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:20.497252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xsq6w" condition "Approved" to 2026-07-08 15:39:20.497237174 +0000 UTC m=+464.391146631 I0708 15:39:20.522488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:20.523943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xsq6w" condition "Ready" to 2026-07-08 15:39:20.523931567 +0000 UTC m=+464.417841044 I0708 15:39:20.531616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kk825" condition "Approved" to 2026-07-08 15:39:20.53158785 +0000 UTC m=+464.425497327 I0708 15:39:20.551863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kk825" condition "Ready" to 2026-07-08 15:39:20.551850187 +0000 UTC m=+464.445759654 I0708 15:39:20.554163 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:39:20.554150351 +0000 UTC m=+464.448059818 I0708 15:39:20.556199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qw58f" condition "Approved" to 2026-07-08 15:39:20.556191732 +0000 UTC m=+464.450101189 I0708 15:39:20.580697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qw58f" condition "Ready" to 2026-07-08 15:39:20.580686621 +0000 UTC m=+464.474596078 I0708 15:39:20.586569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:20.787062 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:39:20.787048137 +0000 UTC m=+464.680957594 I0708 15:39:21.042818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:21.043262 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:39:21.043254126 +0000 UTC m=+464.937163583 I0708 15:39:21.084177 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:39:21.084164827 +0000 UTC m=+464.978074294 I0708 15:39:21.432484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:21.432995 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:39:21.432986673 +0000 UTC m=+465.326896160 I0708 15:39:21.540381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:21.634187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:21.985307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:22.035635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:28.873228 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" condition "Ready" to 2026-07-08 15:39:28.873213104 +0000 UTC m=+472.767122871 I0708 15:39:28.873430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:39:28.873467 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" condition "Issuing" to 2026-07-08 15:39:28.873459258 +0000 UTC m=+472.767368725 I0708 15:39:28.887533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:28.887673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:39:28.887699 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" condition "Issuing" to 2026-07-08 15:39:28.887693025 +0000 UTC m=+472.781602482 I0708 15:39:29.019862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:29.028113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9k2mw-n5r46" condition "Approved" to 2026-07-08 15:39:29.028045294 +0000 UTC m=+472.921954771 I0708 15:39:29.045094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9k2mw-n5r46" condition "Ready" to 2026-07-08 15:39:29.045082752 +0000 UTC m=+472.938992219 I0708 15:39:29.079311 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:39:29.079298071 +0000 UTC m=+472.973207528 I0708 15:39:29.096749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:29.097029 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:39:29.0970215 +0000 UTC m=+472.990930967 I0708 15:39:29.119842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9k2mw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:42.894784 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:39:42.894892 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-08 15:39:42.894883024 +0000 UTC m=+486.788792501 I0708 15:39:42.894919 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 15:39:42.894895885 +0000 UTC m=+486.788805352 I0708 15:39:42.917405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:42.917518 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:39:42.917555 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-08 15:39:42.917549801 +0000 UTC m=+486.811459268 I0708 15:39:43.308306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qs5kl" condition "Approved" to 2026-07-08 15:39:43.308292221 +0000 UTC m=+487.202201698 I0708 15:39:43.326979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qs5kl" condition "Ready" to 2026-07-08 15:39:43.326965699 +0000 UTC m=+487.220875186 I0708 15:39:43.355203 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:39:43.355192756 +0000 UTC m=+487.249102213 I0708 15:39:43.382479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:43.382841 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:39:43.382833804 +0000 UTC m=+487.276743261 I0708 15:39:43.410483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:39:43.410843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:43:09.957142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:43:09.957180 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 15:43:09.957171499 +0000 UTC m=+693.851080966 I0708 15:43:09.957355 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-08 15:43:09.957349935 +0000 UTC m=+693.851259402 I0708 15:43:09.975087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:43:09.975167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:43:09.975200 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 15:43:09.975190165 +0000 UTC m=+693.869099672 I0708 15:43:10.665780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7x6jv" condition "Approved" to 2026-07-08 15:43:10.665767175 +0000 UTC m=+694.559676642 I0708 15:43:10.684267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7x6jv" condition "Ready" to 2026-07-08 15:43:10.684256367 +0000 UTC m=+694.578165834 I0708 15:43:10.711015 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:43:10.711001505 +0000 UTC m=+694.604910982 I0708 15:43:10.737760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:43:54.183200 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 15:43:54.183266 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-08 15:43:54.183259232 +0000 UTC m=+738.077168699 I0708 15:43:54.183578 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-08 15:43:54.183566322 +0000 UTC m=+738.077475789 I0708 15:43:54.200853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:43:54.201047 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-08 15:43:54.201038616 +0000 UTC m=+738.094948093 I0708 15:43:54.439304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:43:54.471303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bdjwx" condition "Approved" to 2026-07-08 15:43:54.471288673 +0000 UTC m=+738.365198140 I0708 15:43:54.488582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bdjwx" condition "Ready" to 2026-07-08 15:43:54.48857211 +0000 UTC m=+738.382481557 I0708 15:43:54.526435 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:43:54.526424839 +0000 UTC m=+738.420334306 I0708 15:43:54.554507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 15:43:54.554829 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 15:43:54.554823328 +0000 UTC m=+738.448732805 I0708 15:43:54.570718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"