I0702 10:00:21.832364 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0702 10:00:21.832583 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0702 10:00:21.832685 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0702 10:00:21.838845 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0702 10:00:21.839416 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0702 10:00:21.839440 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0702 10:00:21.839483 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0702 10:00:21.843457 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0702 10:00:21.861008 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0702 10:00:21.867569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0702 10:00:21.869928 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0702 10:00:21.870071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0702 10:00:21.874769 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0702 10:00:21.876259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0702 10:00:21.880622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0702 10:00:21.883619 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0702 10:00:21.886640 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0702 10:00:21.886710 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0702 10:00:21.886740 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0702 10:00:21.886762 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0702 10:00:21.889115 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0702 10:00:21.891407 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0702 10:00:21.893321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0702 10:00:21.895349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0702 10:00:21.897179 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0702 10:00:21.903735 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0702 10:00:21.906203 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0702 10:00:21.906280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0702 10:00:21.908639 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0702 10:00:21.908725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0702 10:00:21.911134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0702 10:00:21.912885 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0702 10:00:21.915372 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0702 10:00:21.920345 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:00:21.920360 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:00:21.920475 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:00:21.921143 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:00:21.941931 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:00:21.987686 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:00:21.999768 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:00:22.015403 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:00:22.016065 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:00:22.034925 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 10:00:33.422941 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 10:00:33.422920193 +0000 UTC m=+11.629994785 I0702 10:00:34.157287 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 10:00:34.157269708 +0000 UTC m=+12.364344290 I0702 10:00:34.158457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:00:34.158490 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 10:00:34.158483374 +0000 UTC m=+12.365557966 E0702 10:00:34.173414 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:00:34.173548 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 10:00:34.173535881 +0000 UTC m=+12.380610463 E0702 10:00:34.173722 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:00:34.176553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:00:34.176860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:00:34.176907 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 10:00:34.176884244 +0000 UTC m=+12.383958806 E0702 10:00:34.184646 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0702 10:00:34.184806 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:00:34.184908 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:00:34.184994 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0702 10:00:34.223958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xvbwc" condition "Approved" to 2026-07-02 10:00:34.22393962 +0000 UTC m=+12.431014182 I0702 10:00:34.241272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xvbwc" condition "Ready" to 2026-07-02 10:00:34.241255987 +0000 UTC m=+12.448330549 I0702 10:00:34.262933 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:00:34.262915406 +0000 UTC m=+12.469989988 I0702 10:00:34.277162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:00:34.277482 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:00:34.277473509 +0000 UTC m=+12.484548061 I0702 10:00:34.290441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:00:34.290669 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:00:34.290661533 +0000 UTC m=+12.497736095 I0702 10:00:39.186280 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:00:39.186260496 +0000 UTC m=+17.393335078 I0702 10:01:02.259310 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 10:01:02.259231683 +0000 UTC m=+40.466356785 I0702 10:01:02.260108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:01:02.261320 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 10:01:02.261278455 +0000 UTC m=+40.468353267 I0702 10:01:02.277256 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 10:01:02.27724083 +0000 UTC m=+40.484315402 I0702 10:01:02.294669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:01:02.294781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:01:02.294813 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 10:01:02.294806012 +0000 UTC m=+40.501880574 I0702 10:01:02.562625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:01:02.577157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rzx9t" condition "Approved" to 2026-07-02 10:01:02.577146574 +0000 UTC m=+40.784221136 I0702 10:01:02.621749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rzx9t" condition "Ready" to 2026-07-02 10:01:02.621736432 +0000 UTC m=+40.828810984 I0702 10:01:02.658589 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:01:02.658565835 +0000 UTC m=+40.865640417 I0702 10:01:02.691610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:01:02.692027 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:01:02.692018261 +0000 UTC m=+40.899092833 I0702 10:01:02.721514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:05:31.944385 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-175.nip.io-tls" condition "Ready" to 2026-07-02 10:05:31.94431858 +0000 UTC m=+310.151393172 I0702 10:05:31.944921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-175.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:05:31.945331 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-175.nip.io-tls" condition "Issuing" to 2026-07-02 10:05:31.945324427 +0000 UTC m=+310.152399019 I0702 10:05:31.963096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-175.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-175.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:05:31.963255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-175.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:05:31.963339 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-175.nip.io-tls" condition "Issuing" to 2026-07-02 10:05:31.963335434 +0000 UTC m=+310.170409986 I0702 10:05:32.158719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-175.nip.io-tls-zfsgx" condition "Approved" to 2026-07-02 10:05:32.158702761 +0000 UTC m=+310.365777323 I0702 10:05:32.192056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-175.nip.io-tls-zfsgx" condition "Ready" to 2026-07-02 10:05:32.192034607 +0000 UTC m=+310.399109199 I0702 10:05:32.222584 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-175.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:05:32.222563645 +0000 UTC m=+310.429638207 I0702 10:05:32.243495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-175.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-175.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:05:32.293112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-175.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-175.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:06:37.862418 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 10:06:37.862365661 +0000 UTC m=+376.069440243 I0702 10:06:37.863250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:06:37.863378 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 10:06:37.863367166 +0000 UTC m=+376.070441728 E0702 10:06:37.900164 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:06:37.900233 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 10:06:37.900221448 +0000 UTC m=+376.107296030 E0702 10:06:37.900365 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:06:37.904418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:06:37.904570 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 10:06:37.904558481 +0000 UTC m=+376.111633063 E0702 10:06:37.921679 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0702 10:06:37.922056 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:06:37.922109 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:06:37.922191 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0702 10:06:37.932655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:06:37.964506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-llktl" condition "Approved" to 2026-07-02 10:06:37.964492757 +0000 UTC m=+376.171567339 I0702 10:06:37.998695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-llktl" condition "Ready" to 2026-07-02 10:06:37.998683191 +0000 UTC m=+376.205757753 I0702 10:06:38.027025 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:06:38.027011539 +0000 UTC m=+376.234086101 I0702 10:06:38.090197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:06:38.090389 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:06:38.090382123 +0000 UTC m=+376.297456685 I0702 10:06:38.098930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:06:38.107724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:06:42.922282 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:06:42.922266681 +0000 UTC m=+381.129341263 I0702 10:07:26.628867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:26.629397 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 10:07:26.629389531 +0000 UTC m=+424.836464103 I0702 10:07:26.629037 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 10:07:26.629023685 +0000 UTC m=+424.836098247 I0702 10:07:26.633533 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:26.633540 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 10:07:26.633528106 +0000 UTC m=+424.840602658 I0702 10:07:26.633562 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 10:07:26.633551156 +0000 UTC m=+424.840625708 I0702 10:07:26.633820 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 10:07:26.633815559 +0000 UTC m=+424.840890111 I0702 10:07:26.633816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:26.633972 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 10:07:26.633960531 +0000 UTC m=+424.841035103 I0702 10:07:26.660659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:26.660724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:26.660746 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 10:07:26.660740775 +0000 UTC m=+424.867815327 I0702 10:07:26.665784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:26.665833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:26.665849 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 10:07:26.665845263 +0000 UTC m=+424.872919815 I0702 10:07:26.669096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:26.669124 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:26.669135 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 10:07:26.669132966 +0000 UTC m=+424.876207518 I0702 10:07:26.868479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:26.887868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-24cg2" condition "Approved" to 2026-07-02 10:07:26.887859091 +0000 UTC m=+425.094933633 I0702 10:07:26.922394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-24cg2" condition "Ready" to 2026-07-02 10:07:26.922382288 +0000 UTC m=+425.129456850 I0702 10:07:26.938295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jmbk4" condition "Approved" to 2026-07-02 10:07:26.938284749 +0000 UTC m=+425.145359291 I0702 10:07:26.958169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jmbk4" condition "Ready" to 2026-07-02 10:07:26.958164352 +0000 UTC m=+425.165238904 I0702 10:07:26.969821 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:26.969808896 +0000 UTC m=+425.176883448 I0702 10:07:26.986383 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:26.986371926 +0000 UTC m=+425.193446468 I0702 10:07:26.994451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:27.007257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:27.391446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-glkqc" condition "Approved" to 2026-07-02 10:07:27.391415768 +0000 UTC m=+425.598490330 I0702 10:07:27.597439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-glkqc" condition "Ready" to 2026-07-02 10:07:27.59742795 +0000 UTC m=+425.804502512 I0702 10:07:27.837653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:28.037918 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:28.037899501 +0000 UTC m=+426.244974093 I0702 10:07:28.138788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:28.139609 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:28.139598042 +0000 UTC m=+426.346672634 I0702 10:07:28.388708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:28.436872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:34.199755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:34.199994 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" condition "Issuing" to 2026-07-02 10:07:34.19998027 +0000 UTC m=+432.407054852 I0702 10:07:34.199904 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" condition "Ready" to 2026-07-02 10:07:34.199887179 +0000 UTC m=+432.406961741 I0702 10:07:34.214252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jqlml-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:34.214323 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" condition "Ready" to 2026-07-02 10:07:34.214315907 +0000 UTC m=+432.421390469 I0702 10:07:34.351483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jqlml-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:34.396090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jqlml-mdtdk" condition "Approved" to 2026-07-02 10:07:34.396075224 +0000 UTC m=+432.603149796 I0702 10:07:34.420060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jqlml-mdtdk" condition "Ready" to 2026-07-02 10:07:34.420045748 +0000 UTC m=+432.627120340 I0702 10:07:34.446066 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:34.446055137 +0000 UTC m=+432.653129699 I0702 10:07:34.469143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jqlml-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:34.469527 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:34.469516964 +0000 UTC m=+432.676591536 I0702 10:07:34.490500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jqlml-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:34.490764 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jqlml-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:34.490756622 +0000 UTC m=+432.697831184 I0702 10:07:49.615959 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:49.615999 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 10:07:49.615988686 +0000 UTC m=+447.823063258 I0702 10:07:49.616614 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 10:07:49.616606535 +0000 UTC m=+447.823681107 I0702 10:07:49.629977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:49.630032 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 10:07:49.630026476 +0000 UTC m=+447.837101028 I0702 10:07:49.820684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:49.852072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b75q2" condition "Approved" to 2026-07-02 10:07:49.85205903 +0000 UTC m=+448.059133592 I0702 10:07:49.887376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b75q2" condition "Ready" to 2026-07-02 10:07:49.887364452 +0000 UTC m=+448.094439014 I0702 10:07:49.929569 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:49.929551742 +0000 UTC m=+448.136626304 I0702 10:07:49.948397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:49.948649 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:49.948640697 +0000 UTC m=+448.155715259 I0702 10:07:49.967664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:11:15.420128 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:11:15.420169 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 10:11:15.420160382 +0000 UTC m=+653.627234944 I0702 10:11:15.420278 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 10:11:15.420252583 +0000 UTC m=+653.627327165 I0702 10:11:15.437728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:11:15.437826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:11:15.437845 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 10:11:15.437840219 +0000 UTC m=+653.644914771 I0702 10:11:15.620647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:11:15.630805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cmf84" condition "Approved" to 2026-07-02 10:11:15.630783426 +0000 UTC m=+653.837858008 I0702 10:11:15.650973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cmf84" condition "Ready" to 2026-07-02 10:11:15.65096165 +0000 UTC m=+653.858036202 I0702 10:11:15.678822 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:11:15.678805218 +0000 UTC m=+653.885879780 I0702 10:11:15.710234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:11:54.569462 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 10:11:54.569446081 +0000 UTC m=+692.776520643 I0702 10:11:54.570084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:11:54.570143 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 10:11:54.570138312 +0000 UTC m=+692.777212874 I0702 10:11:54.597767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:11:54.597841 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:11:54.597858 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 10:11:54.597851536 +0000 UTC m=+692.804926088 I0702 10:11:55.122853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6bh7n" condition "Approved" to 2026-07-02 10:11:55.122842837 +0000 UTC m=+693.329917389 I0702 10:11:55.159122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6bh7n" condition "Ready" to 2026-07-02 10:11:55.159108729 +0000 UTC m=+693.366183291 I0702 10:11:55.198913 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:11:55.198896714 +0000 UTC m=+693.405971266 I0702 10:11:55.218746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:11:55.263825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"