I0708 03:00:27.723323 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0708 03:00:27.723496 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0708 03:00:27.727295 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0708 03:00:27.727323 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0708 03:00:27.727335 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0708 03:00:27.727828 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0708 03:00:27.727920 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0708 03:00:27.727992 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0708 03:00:27.733675 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0708 03:00:27.747285 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0708 03:00:27.747567 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0708 03:00:27.753522 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0708 03:00:27.756366 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0708 03:00:27.762231 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0708 03:00:27.766779 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0708 03:00:27.771040 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0708 03:00:27.771167 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0708 03:00:27.773113 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0708 03:00:27.774971 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0708 03:00:27.778869 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0708 03:00:27.779021 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0708 03:00:27.778924 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0708 03:00:27.783594 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0708 03:00:27.786186 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0708 03:00:27.788464 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0708 03:00:27.790146 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0708 03:00:27.791966 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0708 03:00:27.791982 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0708 03:00:27.792113 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0708 03:00:27.793995 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0708 03:00:27.795965 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0708 03:00:27.802250 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0708 03:00:27.806760 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0708 03:00:27.811035 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0708 03:00:27.815372 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:27.815407 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:27.815493 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:27.815602 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:27.816107 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:27.817026 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:27.832194 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:27.857415 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:27.873546 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:27.895474 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:27.911785 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0708 03:00:39.157894 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-08 03:00:39.157369767 +0000 UTC m=+11.459340919 I0708 03:00:39.878284 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:00:39.878355 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-08 03:00:39.878343379 +0000 UTC m=+12.180314551 I0708 03:00:39.879345 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 03:00:39.879323344 +0000 UTC m=+12.181294516 E0708 03:00:39.888750 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 03:00:39.888930 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-08 03:00:39.888843306 +0000 UTC m=+12.190892230 E0708 03:00:39.888954 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 03:00:39.895963 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:00:39.896075 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 03:00:39.89606755 +0000 UTC m=+12.198038702 E0708 03:00:39.898735 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0708 03:00:39.899825 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 03:00:39.899868 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 03:00:39.900044 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0708 03:00:39.913505 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:00:39.947771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-08 03:00:39.947757127 +0000 UTC m=+12.249728279 I0708 03:00:39.976113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-08 03:00:39.976092838 +0000 UTC m=+12.278064020 I0708 03:00:40.004517 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:00:40.004503052 +0000 UTC m=+12.306474204 I0708 03:00:40.018198 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:00:40.018554 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:00:40.018543739 +0000 UTC m=+12.320514891 I0708 03:00:40.023698 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:00:40.029733 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:00:44.899419 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:00:44.89940136 +0000 UTC m=+17.201372542 I0708 03:01:08.213596 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-08 03:01:08.213549792 +0000 UTC m=+40.515520944 I0708 03:01:08.216221 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:01:08.218816 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 03:01:08.21631848 +0000 UTC m=+40.518289642 I0708 03:01:08.228695 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:01:08.228789 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:01:08.228853 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 03:01:08.228845938 +0000 UTC m=+40.530817080 I0708 03:01:08.234387 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-08 03:01:08.234365033 +0000 UTC m=+40.536336195 I0708 03:01:08.458356 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:01:08.471901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-08 03:01:08.471886868 +0000 UTC m=+40.773858010 I0708 03:01:08.496855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-08 03:01:08.49683525 +0000 UTC m=+40.798806412 I0708 03:01:08.528728 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:01:08.528707933 +0000 UTC m=+40.830679075 I0708 03:01:08.551191 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:01:08.552596 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:01:08.552585188 +0000 UTC m=+40.854556340 I0708 03:01:08.573652 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:05:19.408713 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-229.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:05:19.409178 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Issuing" to 2026-07-08 03:05:19.408841466 +0000 UTC m=+291.710812648 I0708 03:05:19.409321 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready" to 2026-07-08 03:05:19.408577619 +0000 UTC m=+291.710548801 I0708 03:05:19.422801 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:05:19.423153 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready" to 2026-07-08 03:05:19.42314345 +0000 UTC m=+291.725114602 I0708 03:05:19.717830 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:05:19.742881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-1" condition "Approved" to 2026-07-08 03:05:19.742861473 +0000 UTC m=+292.044832625 I0708 03:05:19.756711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-1" condition "Ready" to 2026-07-08 03:05:19.756698436 +0000 UTC m=+292.058669588 I0708 03:05:19.779778 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:05:19.77976479 +0000 UTC m=+292.081735942 I0708 03:05:19.791008 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:05:19.791520 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:05:19.791513308 +0000 UTC m=+292.093484450 I0708 03:05:19.806231 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:06:25.039895 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-08 03:06:25.039880864 +0000 UTC m=+357.341852006 I0708 03:06:25.039881 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:06:25.039968 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 03:06:25.039953856 +0000 UTC m=+357.341925008 E0708 03:06:25.050532 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 03:06:25.050613 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-08 03:06:25.050602993 +0000 UTC m=+357.352574175 E0708 03:06:25.050652 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 03:06:25.051466 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:06:25.051586 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:06:25.051822 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 03:06:25.051807364 +0000 UTC m=+357.353778536 E0708 03:06:25.059932 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0708 03:06:25.060010 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 03:06:25.060093 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 03:06:25.060162 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0708 03:06:25.087780 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:06:25.092907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-08 03:06:25.092882264 +0000 UTC m=+357.394853456 I0708 03:06:25.107481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-08 03:06:25.107458808 +0000 UTC m=+357.409430000 I0708 03:06:25.130396 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:06:25.130380604 +0000 UTC m=+357.432351756 I0708 03:06:25.143739 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:06:25.144053 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:06:25.144048217 +0000 UTC m=+357.446019369 I0708 03:06:25.160590 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:06:30.060871 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:06:30.060854643 +0000 UTC m=+362.362825885 I0708 03:07:12.947971 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:07:12.948010 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-08 03:07:12.948001169 +0000 UTC m=+405.249972311 I0708 03:07:12.948302 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 03:07:12.948297646 +0000 UTC m=+405.250268788 I0708 03:07:12.948599 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:07:12.948615 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 03:07:12.948612623 +0000 UTC m=+405.250583765 I0708 03:07:12.948755 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-08 03:07:12.948752017 +0000 UTC m=+405.250723159 I0708 03:07:12.957510 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 03:07:12.957495031 +0000 UTC m=+405.259466173 I0708 03:07:12.962962 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:07:12.964258 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-08 03:07:12.964242377 +0000 UTC m=+405.266213539 I0708 03:07:12.989079 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:12.989266 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:07:12.989467 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 03:07:12.989452137 +0000 UTC m=+405.291423319 I0708 03:07:12.998204 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:12.998282 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 03:07:12.998272154 +0000 UTC m=+405.300243296 I0708 03:07:12.998618 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:12.998657 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 03:07:12.998654224 +0000 UTC m=+405.300625366 I0708 03:07:13.112055 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:13.122892 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:13.159243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-08 03:07:13.159230987 +0000 UTC m=+405.461202119 I0708 03:07:13.163752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-08 03:07:13.163734267 +0000 UTC m=+405.465705409 I0708 03:07:13.178854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-08 03:07:13.178838239 +0000 UTC m=+405.480809391 I0708 03:07:13.190110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-08 03:07:13.190093625 +0000 UTC m=+405.492064767 I0708 03:07:13.207705 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:07:13.207689237 +0000 UTC m=+405.509660389 I0708 03:07:13.215762 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:07:13.215748365 +0000 UTC m=+405.517719507 I0708 03:07:13.222102 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:13.224857 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:07:13.224841578 +0000 UTC m=+405.526812730 I0708 03:07:13.229162 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:13.473430 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:13.529604 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:13.971868 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:14.027492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-08 03:07:14.02747917 +0000 UTC m=+406.329450322 I0708 03:07:14.069702 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:14.180530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-08 03:07:14.180519727 +0000 UTC m=+406.482490879 I0708 03:07:14.625157 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:07:14.625145193 +0000 UTC m=+406.927116335 I0708 03:07:14.723608 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:14.724235 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:07:14.724227415 +0000 UTC m=+407.026198567 I0708 03:07:14.924773 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:15.021709 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:22.244982 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:07:22.245036 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" condition "Issuing" to 2026-07-08 03:07:22.245019706 +0000 UTC m=+414.546990858 I0708 03:07:22.245180 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" condition "Ready" to 2026-07-08 03:07:22.245158849 +0000 UTC m=+414.547130031 I0708 03:07:22.257460 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:22.257583 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" condition "Ready" to 2026-07-08 03:07:22.257568023 +0000 UTC m=+414.559539175 I0708 03:07:22.634243 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:22.679920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls-1" condition "Approved" to 2026-07-08 03:07:22.679905863 +0000 UTC m=+414.981877005 I0708 03:07:22.704030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls-1" condition "Ready" to 2026-07-08 03:07:22.704013043 +0000 UTC m=+415.005984195 I0708 03:07:22.738343 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:07:22.738327863 +0000 UTC m=+415.040299025 I0708 03:07:22.760976 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:22.763579 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:07:22.763569601 +0000 UTC m=+415.065540743 I0708 03:07:22.772843 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:22.787208 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9p5z6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:34.459981 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 03:07:34.459483832 +0000 UTC m=+426.761454964 I0708 03:07:34.461173 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:07:34.461840 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-08 03:07:34.461294706 +0000 UTC m=+426.763265878 I0708 03:07:34.473192 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:34.473335 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 03:07:34.473322959 +0000 UTC m=+426.775294111 I0708 03:07:34.668991 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:34.741985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-08 03:07:34.74196673 +0000 UTC m=+427.043937902 I0708 03:07:34.760604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-08 03:07:34.760593265 +0000 UTC m=+427.062564417 I0708 03:07:34.783790 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:07:34.783783271 +0000 UTC m=+427.085754413 I0708 03:07:34.796886 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:34.799550 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:07:34.799541595 +0000 UTC m=+427.101512737 I0708 03:07:34.812427 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:07:34.812966 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:07:34.812952893 +0000 UTC m=+427.114924035 I0708 03:10:51.872847 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-08 03:10:51.872813271 +0000 UTC m=+624.174784513 I0708 03:10:51.873386 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:10:51.873509 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 03:10:51.873493817 +0000 UTC m=+624.175464989 I0708 03:10:51.884932 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:10:51.884999 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:10:51.885020 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 03:10:51.88501291 +0000 UTC m=+624.186984062 I0708 03:10:52.234795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-08 03:10:52.234765116 +0000 UTC m=+624.536736348 I0708 03:10:52.258341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-08 03:10:52.258326512 +0000 UTC m=+624.560297664 I0708 03:10:52.293339 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:10:52.293315469 +0000 UTC m=+624.595286621 I0708 03:10:52.313222 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:11:37.197964 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-08 03:11:37.197950198 +0000 UTC m=+669.499921350 I0708 03:11:37.198374 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:11:37.198450 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-08 03:11:37.198443509 +0000 UTC m=+669.500414671 I0708 03:11:37.215378 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:11:37.215438 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:11:37.215456 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-08 03:11:37.21544833 +0000 UTC m=+669.517419482 I0708 03:11:37.366516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-08 03:11:37.36650005 +0000 UTC m=+669.668471202 I0708 03:11:37.390732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-08 03:11:37.390721841 +0000 UTC m=+669.692692983 I0708 03:11:37.410734 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:11:37.410697802 +0000 UTC m=+669.712668964 I0708 03:11:37.425447 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:11:37.428629 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:11:37.428618295 +0000 UTC m=+669.730589457 I0708 03:11:37.446479 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"