I0702 03:17:30.407991 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0702 03:17:30.408180 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0702 03:17:30.408266 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0702 03:17:30.411702 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0702 03:17:30.412111 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0702 03:17:30.412128 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0702 03:17:30.412166 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0702 03:17:30.414737 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0702 03:17:30.429252 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0702 03:17:30.433011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0702 03:17:30.439480 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0702 03:17:30.439537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0702 03:17:30.442176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0702 03:17:30.445055 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0702 03:17:30.447472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0702 03:17:30.449809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0702 03:17:30.451387 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0702 03:17:30.451430 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0702 03:17:30.453335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0702 03:17:30.459448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0702 03:17:30.463256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0702 03:17:30.466030 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0702 03:17:30.466213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0702 03:17:30.468698 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0702 03:17:30.468782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0702 03:17:30.471000 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0702 03:17:30.471021 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0702 03:17:30.471101 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0702 03:17:30.473067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0702 03:17:30.474964 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0702 03:17:30.479365 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0702 03:17:30.486529 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0702 03:17:30.490509 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0702 03:17:30.492627 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 03:17:30.493862 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 03:17:30.494096 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 03:17:30.509566 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 03:17:30.528032 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 03:17:30.544171 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 03:17:30.564453 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 03:17:30.578874 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 03:17:30.590347 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 03:17:30.602105 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 E0702 03:17:54.130495 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out I0702 03:19:02.813911 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 03:19:02.813896212 +0000 UTC m=+92.441185680 I0702 03:19:03.545778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:19:03.545825 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 03:19:03.545816985 +0000 UTC m=+93.173106463 I0702 03:19:03.545781 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 03:19:03.545764344 +0000 UTC m=+93.173053842 E0702 03:19:03.562496 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 03:19:03.562595 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 03:19:03.56258928 +0000 UTC m=+93.189878758 E0702 03:19:03.562635 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 03:19:03.562846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:19:03.564995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:19:03.565035 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 03:19:03.56502646 +0000 UTC m=+93.192315948 E0702 03:19:03.578979 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0702 03:19:03.579104 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 03:19:03.579155 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 03:19:03.579205 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0702 03:19:03.610542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-98bn6" condition "Approved" to 2026-07-02 03:19:03.610527782 +0000 UTC m=+93.237817260 I0702 03:19:03.623147 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-98bn6" condition "Ready" to 2026-07-02 03:19:03.623133193 +0000 UTC m=+93.250422691 I0702 03:19:03.648632 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:19:03.648610848 +0000 UTC m=+93.275900346 I0702 03:19:03.671843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:19:03.672230 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:19:03.67222336 +0000 UTC m=+93.299512838 I0702 03:19:03.688580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:19:03.688875 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:19:03.688865683 +0000 UTC m=+93.316155161 I0702 03:19:03.691677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:19:08.580211 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:19:08.580192383 +0000 UTC m=+98.207481851 I0702 03:19:40.312488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:19:40.312526 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 03:19:40.312517116 +0000 UTC m=+129.939806594 I0702 03:19:40.314828 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 03:19:40.314793933 +0000 UTC m=+129.942083411 I0702 03:19:40.331818 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 03:19:40.331799545 +0000 UTC m=+129.959089013 I0702 03:19:40.342446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:19:40.342517 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 03:19:40.342507727 +0000 UTC m=+129.969797195 I0702 03:19:40.695287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:19:40.730216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jsp45" condition "Approved" to 2026-07-02 03:19:40.730205135 +0000 UTC m=+130.357494603 I0702 03:19:40.762063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jsp45" condition "Ready" to 2026-07-02 03:19:40.762049546 +0000 UTC m=+130.389339024 I0702 03:19:40.793457 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:19:40.793440242 +0000 UTC m=+130.420729740 I0702 03:19:40.826507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:24:32.747207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:24:32.747369 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Issuing" to 2026-07-02 03:24:32.747259874 +0000 UTC m=+422.374549352 I0702 03:24:32.748258 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready" to 2026-07-02 03:24:32.748248868 +0000 UTC m=+422.375538376 I0702 03:24:32.764882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:24:32.764956 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready" to 2026-07-02 03:24:32.764948336 +0000 UTC m=+422.392237824 I0702 03:24:32.890977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:24:32.921278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-6hv62" condition "Approved" to 2026-07-02 03:24:32.921263121 +0000 UTC m=+422.548552619 I0702 03:24:32.950269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-6hv62" condition "Ready" to 2026-07-02 03:24:32.950258377 +0000 UTC m=+422.577547845 I0702 03:24:32.977603 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:24:32.97759348 +0000 UTC m=+422.604882948 I0702 03:24:32.997624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:25:39.109006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:25:39.109007 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 03:25:39.108987064 +0000 UTC m=+488.736276562 I0702 03:25:39.109052 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 03:25:39.109041325 +0000 UTC m=+488.736330823 I0702 03:25:39.121785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:25:39.121977 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:25:39.122056 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 03:25:39.122048259 +0000 UTC m=+488.749337737 E0702 03:25:39.125490 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 03:25:39.125524 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 03:25:39.125515943 +0000 UTC m=+488.752805421 E0702 03:25:39.125590 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 03:25:39.135083 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0702 03:25:39.137842 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 03:25:39.137910 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 03:25:39.137995 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0702 03:25:39.155585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:25:39.160562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zrqvw" condition "Approved" to 2026-07-02 03:25:39.160547806 +0000 UTC m=+488.787837284 I0702 03:25:39.171077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zrqvw" condition "Ready" to 2026-07-02 03:25:39.171065268 +0000 UTC m=+488.798354746 I0702 03:25:39.190247 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:25:39.19023147 +0000 UTC m=+488.817520948 I0702 03:25:39.213222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:25:39.213579 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:25:39.213568845 +0000 UTC m=+488.840858333 I0702 03:25:39.219455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:25:39.225911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:25:44.135866 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:25:44.13582577 +0000 UTC m=+493.763115278 I0702 03:26:25.049416 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 03:26:25.049379086 +0000 UTC m=+534.676668554 I0702 03:26:25.049705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:26:25.049804 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 03:26:25.049786281 +0000 UTC m=+534.677075749 I0702 03:26:25.053514 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 03:26:25.053499976 +0000 UTC m=+534.680789444 I0702 03:26:25.053531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:26:25.053618 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 03:26:25.053614187 +0000 UTC m=+534.680903665 I0702 03:26:25.060879 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 03:26:25.060863815 +0000 UTC m=+534.688153283 I0702 03:26:25.061181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:26:25.061202 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 03:26:25.061198809 +0000 UTC m=+534.688488287 I0702 03:26:25.086615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:25.086674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:26:25.086691 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 03:26:25.086685539 +0000 UTC m=+534.713975007 I0702 03:26:25.086724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:25.086802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:26:25.086832 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 03:26:25.086825161 +0000 UTC m=+534.714114629 I0702 03:26:25.089557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:25.089632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:26:25.089662 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 03:26:25.089655585 +0000 UTC m=+534.716945063 I0702 03:26:25.291150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xz6tw" condition "Approved" to 2026-07-02 03:26:25.291120518 +0000 UTC m=+534.918409996 I0702 03:26:25.302305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zfws2" condition "Approved" to 2026-07-02 03:26:25.302290705 +0000 UTC m=+534.929580163 I0702 03:26:25.328036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zfws2" condition "Ready" to 2026-07-02 03:26:25.328024449 +0000 UTC m=+534.955313907 I0702 03:26:25.329477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xz6tw" condition "Ready" to 2026-07-02 03:26:25.329463206 +0000 UTC m=+534.956752674 I0702 03:26:25.387039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:26:25.387073 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 03:26:25.387065097 +0000 UTC m=+535.014354575 I0702 03:26:25.401603 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:26:25.401590913 +0000 UTC m=+535.028880381 I0702 03:26:25.402177 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:26:25.402170901 +0000 UTC m=+535.029460379 I0702 03:26:25.425321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:25.438284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:25.438569 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:26:25.438560074 +0000 UTC m=+535.065849542 I0702 03:26:25.443333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:25.443602 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:26:25.443597115 +0000 UTC m=+535.070886583 I0702 03:26:25.571970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:25.822125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:25.930742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dhgx4" condition "Approved" to 2026-07-02 03:26:25.930730706 +0000 UTC m=+535.558020184 I0702 03:26:26.432864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dhgx4" condition "Ready" to 2026-07-02 03:26:26.432851257 +0000 UTC m=+536.060140725 I0702 03:26:26.472858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:26.531053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-glnh5" condition "Approved" to 2026-07-02 03:26:26.531022651 +0000 UTC m=+536.158312149 I0702 03:26:26.883328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-glnh5" condition "Ready" to 2026-07-02 03:26:26.883296067 +0000 UTC m=+536.510585535 I0702 03:26:27.323811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:27.374574 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:26:27.374552941 +0000 UTC m=+537.001842449 I0702 03:26:27.671228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:27.671661 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:26:27.671650343 +0000 UTC m=+537.298939821 I0702 03:26:27.731901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:27.779734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:28.043845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:33.431654 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sww55-tls" condition "Ready" to 2026-07-02 03:26:33.43163286 +0000 UTC m=+543.058922338 I0702 03:26:33.431694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sww55-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:26:33.431716 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sww55-tls" condition "Issuing" to 2026-07-02 03:26:33.431710191 +0000 UTC m=+543.058999669 I0702 03:26:33.447635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sww55-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sww55-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:33.447718 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sww55-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:26:33.447818 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sww55-tls" condition "Issuing" to 2026-07-02 03:26:33.447807527 +0000 UTC m=+543.075097035 I0702 03:26:33.590417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sww55-dzgr4" condition "Approved" to 2026-07-02 03:26:33.590399334 +0000 UTC m=+543.217688812 I0702 03:26:33.611430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sww55-dzgr4" condition "Ready" to 2026-07-02 03:26:33.611418809 +0000 UTC m=+543.238708277 I0702 03:26:33.638731 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sww55-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:26:33.638718939 +0000 UTC m=+543.266008407 I0702 03:26:33.670355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sww55-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sww55-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:51.684120 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 03:26:51.684104303 +0000 UTC m=+561.311393781 I0702 03:26:51.684159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:26:51.684189 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 03:26:51.684182754 +0000 UTC m=+561.311472222 I0702 03:26:51.696239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:51.696391 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 03:26:51.69638251 +0000 UTC m=+561.323671978 I0702 03:26:52.030351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:26:52.088013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6t456" condition "Approved" to 2026-07-02 03:26:52.087993682 +0000 UTC m=+561.715283160 I0702 03:26:52.110370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6t456" condition "Ready" to 2026-07-02 03:26:52.11035672 +0000 UTC m=+561.737646198 I0702 03:26:52.141053 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:26:52.141039148 +0000 UTC m=+561.768328616 I0702 03:26:52.163665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:30:11.782283 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:30:11.782308 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 03:30:11.782287989 +0000 UTC m=+761.409577517 I0702 03:30:11.782337 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 03:30:11.78233336 +0000 UTC m=+761.409622828 I0702 03:30:11.796732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:30:11.796792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:30:11.796812 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 03:30:11.796807419 +0000 UTC m=+761.424096887 I0702 03:30:12.213972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-q6l2s" condition "Approved" to 2026-07-02 03:30:12.213951933 +0000 UTC m=+761.841241441 I0702 03:30:12.229228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-q6l2s" condition "Ready" to 2026-07-02 03:30:12.229219893 +0000 UTC m=+761.856509361 I0702 03:30:12.261007 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:30:12.260991208 +0000 UTC m=+761.888280696 I0702 03:30:12.286324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:30:12.286662 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:30:12.286656807 +0000 UTC m=+761.913946275 I0702 03:30:12.288880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:30:12.299156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:30:53.091424 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 03:30:53.091410203 +0000 UTC m=+802.718699661 I0702 03:30:53.091484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 03:30:53.091535 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 03:30:53.091529076 +0000 UTC m=+802.718818544 I0702 03:30:53.109237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:30:53.109339 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 03:30:53.109330928 +0000 UTC m=+802.736620416 I0702 03:30:53.592896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 03:30:53.623653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8gchg" condition "Approved" to 2026-07-02 03:30:53.623641075 +0000 UTC m=+803.250930553 I0702 03:30:53.647545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8gchg" condition "Ready" to 2026-07-02 03:30:53.647534708 +0000 UTC m=+803.274824176 I0702 03:30:53.670711 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 03:30:53.670699893 +0000 UTC m=+803.297989371 I0702 03:30:53.689814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"