I0707 07:25:24.807559 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0707 07:25:24.807878 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0707 07:25:24.812017 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0707 07:25:24.812049 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0707 07:25:24.812067 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0707 07:25:24.812467 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0707 07:25:24.812510 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0707 07:25:24.812524 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0707 07:25:24.816273 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0707 07:25:24.826822 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0707 07:25:24.826983 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0707 07:25:24.830847 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0707 07:25:24.834828 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0707 07:25:24.844129 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0707 07:25:24.847143 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0707 07:25:24.847224 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0707 07:25:24.850834 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0707 07:25:24.854532 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0707 07:25:24.859341 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0707 07:25:24.866565 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0707 07:25:24.869122 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0707 07:25:24.871978 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0707 07:25:24.874272 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0707 07:25:24.876390 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0707 07:25:24.878114 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0707 07:25:24.878135 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0707 07:25:24.878290 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0707 07:25:24.880123 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0707 07:25:24.886599 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0707 07:25:24.890703 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0707 07:25:24.893502 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0707 07:25:24.895301 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0707 07:25:24.895317 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0707 07:25:24.895344 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0707 07:25:24.899529 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:24.900075 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:24.900184 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:24.900427 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:24.900430 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:24.901222 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:24.957644 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:24.974790 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:24.993294 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:25.007840 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:25.025043 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0707 07:25:36.184048 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-07 07:25:36.184021396 +0000 UTC m=+11.402952149 I0707 07:25:36.917537 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:25:36.917606 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-07 07:25:36.917595173 +0000 UTC m=+12.136525926 I0707 07:25:36.918744 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-07 07:25:36.918736116 +0000 UTC m=+12.137666859 E0707 07:25:36.928715 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0707 07:25:36.928752 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-07 07:25:36.928746114 +0000 UTC m=+12.147676827 E0707 07:25:36.928787 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0707 07:25:36.930229 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:25:36.931745 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-07 07:25:36.931733623 +0000 UTC m=+12.150664386 E0707 07:25:36.942192 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0707 07:25:36.942813 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0707 07:25:36.942848 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0707 07:25:36.942876 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0707 07:25:36.948249 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:25:36.976385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-07 07:25:36.976351741 +0000 UTC m=+12.195282464 I0707 07:25:37.011693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-07 07:25:37.011681138 +0000 UTC m=+12.230611871 I0707 07:25:37.033861 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:25:37.033850449 +0000 UTC m=+12.252781172 I0707 07:25:37.049414 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:25:37.049943 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:25:37.049935425 +0000 UTC m=+12.268866148 I0707 07:25:37.062596 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:25:37.063178 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:25:41.943276 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:25:41.943262335 +0000 UTC m=+17.162193058 I0707 07:26:03.502821 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-07 07:26:03.502768718 +0000 UTC m=+38.721699441 I0707 07:26:03.503437 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:26:03.503530 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-07 07:26:03.503520241 +0000 UTC m=+38.722450964 I0707 07:26:03.521971 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:26:03.522396 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:26:03.522453 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-07 07:26:03.522445723 +0000 UTC m=+38.741376446 I0707 07:26:03.517428 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-07 07:26:03.517416372 +0000 UTC m=+38.736347085 I0707 07:26:03.715084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-07 07:26:03.715066106 +0000 UTC m=+38.933996829 I0707 07:26:03.736804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-07 07:26:03.736790914 +0000 UTC m=+38.955721637 I0707 07:26:03.765791 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:26:03.76573825 +0000 UTC m=+38.984668993 I0707 07:26:03.782521 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:26:03.786643 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:26:03.786632303 +0000 UTC m=+39.005563026 I0707 07:26:03.811551 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:30:07.358523 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-114.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:30:07.358748 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-114.nip.io-tls" condition "Ready" to 2026-07-07 07:30:07.358727737 +0000 UTC m=+282.577658450 I0707 07:30:07.358881 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-114.nip.io-tls" condition "Issuing" to 2026-07-07 07:30:07.358878056 +0000 UTC m=+282.577808769 I0707 07:30:07.375940 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-114.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-114.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:30:07.376007 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-114.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:30:07.376027 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-114.nip.io-tls" condition "Issuing" to 2026-07-07 07:30:07.376020378 +0000 UTC m=+282.594951111 I0707 07:30:07.560445 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-114.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-114.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:30:07.575580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-114.nip.io-tls-1" condition "Approved" to 2026-07-07 07:30:07.575569187 +0000 UTC m=+282.794499890 I0707 07:30:07.588204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-114.nip.io-tls-1" condition "Ready" to 2026-07-07 07:30:07.588193776 +0000 UTC m=+282.807124499 I0707 07:30:07.608990 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-114.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:30:07.608975122 +0000 UTC m=+282.827905875 I0707 07:30:07.621982 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-114.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-114.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:30:07.622609 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-114.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:30:07.622601679 +0000 UTC m=+282.841532402 I0707 07:30:07.633075 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-114.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-114.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:30:07.639298 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-114.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-114.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:31:13.542898 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:31:13.542951 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-07 07:31:13.542776879 +0000 UTC m=+348.761707592 I0707 07:31:13.542983 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-07 07:31:13.542973714 +0000 UTC m=+348.761904437 E0707 07:31:13.553428 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0707 07:31:13.553763 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-07 07:31:13.55375105 +0000 UTC m=+348.772681773 E0707 07:31:13.553878 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0707 07:31:13.557640 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:31:13.557819 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:31:13.557879 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-07 07:31:13.557870599 +0000 UTC m=+348.776801332 E0707 07:31:13.562962 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0707 07:31:13.563238 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0707 07:31:13.563338 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0707 07:31:13.563417 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0707 07:31:13.587542 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:31:13.596288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-07 07:31:13.596257699 +0000 UTC m=+348.815188442 I0707 07:31:13.614316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-07 07:31:13.614305108 +0000 UTC m=+348.833235811 I0707 07:31:13.636044 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:31:13.636022404 +0000 UTC m=+348.854953127 I0707 07:31:13.654722 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:31:13.655231 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:31:13.655208334 +0000 UTC m=+348.874139067 I0707 07:31:13.668954 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:31:13.669516 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:31:13.669503513 +0000 UTC m=+348.888434266 I0707 07:31:13.672254 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:31:18.563466 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:31:18.563453499 +0000 UTC m=+353.782384212 I0707 07:32:00.895776 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-07 07:32:00.895746898 +0000 UTC m=+396.114677621 I0707 07:32:00.896660 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:32:00.905160 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-07 07:32:00.905135458 +0000 UTC m=+396.124066191 I0707 07:32:00.936978 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-07 07:32:00.936952371 +0000 UTC m=+396.155883094 I0707 07:32:00.939146 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:32:00.939173 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-07 07:32:00.939167808 +0000 UTC m=+396.158098531 I0707 07:32:00.939773 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:32:00.939830 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-07 07:32:00.939811723 +0000 UTC m=+396.158742446 I0707 07:32:00.943148 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-07 07:32:00.939803753 +0000 UTC m=+396.158734466 I0707 07:32:00.959516 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:00.963283 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:32:00.965842 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-07 07:32:00.965826197 +0000 UTC m=+396.184756920 I0707 07:32:00.979854 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:00.983640 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:00.983738 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:32:00.983766 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-07 07:32:00.983757874 +0000 UTC m=+396.202688577 I0707 07:32:00.991415 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-07 07:32:00.991399616 +0000 UTC m=+396.210330329 I0707 07:32:01.240308 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:01.263606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-07 07:32:01.263590073 +0000 UTC m=+396.482520786 I0707 07:32:01.309590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-07 07:32:01.309577274 +0000 UTC m=+396.528507997 I0707 07:32:01.346947 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:32:01.346932823 +0000 UTC m=+396.565863546 I0707 07:32:01.368633 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:01.564061 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:01.617942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-07 07:32:01.617932776 +0000 UTC m=+396.836863479 I0707 07:32:01.652789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-07 07:32:01.652772277 +0000 UTC m=+396.871702980 I0707 07:32:01.692899 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:32:01.692890445 +0000 UTC m=+396.911821148 I0707 07:32:01.707440 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:01.708383 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:32:01.708373248 +0000 UTC m=+396.927303961 I0707 07:32:01.727162 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:01.730474 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:01.904074 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:01.946377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-07 07:32:01.946362984 +0000 UTC m=+397.165293697 I0707 07:32:02.095717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-07 07:32:02.095706229 +0000 UTC m=+397.314636952 I0707 07:32:02.490208 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:32:02.490194511 +0000 UTC m=+397.709125234 I0707 07:32:02.586908 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:02.587842 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:32:02.587833719 +0000 UTC m=+397.806764442 I0707 07:32:02.836907 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:02.886768 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:02.986713 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:09.364737 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bwltr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:32:09.364776 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bwltr-tls" condition "Issuing" to 2026-07-07 07:32:09.364762546 +0000 UTC m=+404.583693259 I0707 07:32:09.365183 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bwltr-tls" condition "Ready" to 2026-07-07 07:32:09.365178044 +0000 UTC m=+404.584108767 I0707 07:32:09.384521 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bwltr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bwltr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:09.384671 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bwltr-tls" condition "Ready" to 2026-07-07 07:32:09.38466336 +0000 UTC m=+404.603594073 I0707 07:32:09.453889 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bwltr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bwltr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:09.494789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bwltr-tls-1" condition "Approved" to 2026-07-07 07:32:09.494775912 +0000 UTC m=+404.713706625 I0707 07:32:09.520128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bwltr-tls-1" condition "Ready" to 2026-07-07 07:32:09.520118129 +0000 UTC m=+404.739048842 I0707 07:32:09.554336 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bwltr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:32:09.554318223 +0000 UTC m=+404.773248936 I0707 07:32:09.568778 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bwltr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bwltr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:09.609054 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bwltr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bwltr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:22.484849 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:32:22.484890 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-07 07:32:22.484877855 +0000 UTC m=+417.703808578 I0707 07:32:22.485333 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-07 07:32:22.485315764 +0000 UTC m=+417.704246497 I0707 07:32:22.498467 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:22.498846 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-07 07:32:22.498808997 +0000 UTC m=+417.717739750 I0707 07:32:22.659323 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:22.681907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-07 07:32:22.681894392 +0000 UTC m=+417.900825105 I0707 07:32:22.703814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-07 07:32:22.703803895 +0000 UTC m=+417.922734608 I0707 07:32:22.736461 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:32:22.73644857 +0000 UTC m=+417.955379293 I0707 07:32:22.747699 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:32:22.748176 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:32:22.748170365 +0000 UTC m=+417.967101078 I0707 07:32:22.764931 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:35:50.728006 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:35:50.728311 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-07 07:35:50.728301078 +0000 UTC m=+625.947231791 I0707 07:35:50.728076 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-07 07:35:50.728055411 +0000 UTC m=+625.946986154 I0707 07:35:50.743273 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:35:50.743613 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-07 07:35:50.743601808 +0000 UTC m=+625.962532531 I0707 07:35:50.866764 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:35:50.900218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-07 07:35:50.900200969 +0000 UTC m=+626.119131692 I0707 07:35:50.920770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-07 07:35:50.920757663 +0000 UTC m=+626.139688386 I0707 07:35:50.949433 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:35:50.949419461 +0000 UTC m=+626.168350174 I0707 07:35:50.965847 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:35:50.966990 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:35:50.966976674 +0000 UTC m=+626.185907427 I0707 07:35:50.981435 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:36:35.118896 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-07 07:36:35.118879902 +0000 UTC m=+670.337810645 I0707 07:36:35.119289 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:36:35.119321 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-07 07:36:35.1193176 +0000 UTC m=+670.338248313 I0707 07:36:35.136408 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0707 07:36:35.136573 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0707 07:36:35.136608 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-07 07:36:35.13659882 +0000 UTC m=+670.355529543 I0707 07:36:35.407532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-07 07:36:35.402730353 +0000 UTC m=+670.621661066 I0707 07:36:35.428550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-07 07:36:35.428531335 +0000 UTC m=+670.647462068 I0707 07:36:35.450451 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-07 07:36:35.450440656 +0000 UTC m=+670.669371379 I0707 07:36:35.468580 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"