I0703 11:59:35.537946 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0703 11:59:35.538093 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0703 11:59:35.538175 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0703 11:59:35.541422 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0703 11:59:35.541772 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0703 11:59:35.541880 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0703 11:59:35.541972 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0703 11:59:35.544316 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0703 11:59:35.558796 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0703 11:59:35.562872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0703 11:59:35.568275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0703 11:59:35.572475 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0703 11:59:35.572506 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0703 11:59:35.572520 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0703 11:59:35.572604 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0703 11:59:35.575175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0703 11:59:35.576824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0703 11:59:35.578624 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0703 11:59:35.580642 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0703 11:59:35.583256 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0703 11:59:35.583315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0703 11:59:35.590662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0703 11:59:35.593454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0703 11:59:35.596174 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0703 11:59:35.596219 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0703 11:59:35.598668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0703 11:59:35.600482 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0703 11:59:35.602531 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0703 11:59:35.604434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0703 11:59:35.606281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0703 11:59:35.608251 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0703 11:59:35.613405 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0703 11:59:35.614170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0703 11:59:35.617671 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 11:59:35.618332 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 11:59:35.619308 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 11:59:35.644472 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 11:59:35.656226 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 11:59:35.672139 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 11:59:35.685596 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 11:59:35.700596 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 11:59:35.714748 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 11:59:35.715665 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 11:59:57.726598 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-03 11:59:57.72657592 +0000 UTC m=+22.220735277 I0703 11:59:58.462858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 11:59:58.462920 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-03 11:59:58.462905732 +0000 UTC m=+22.957065099 I0703 11:59:58.463105 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-03 11:59:58.463071365 +0000 UTC m=+22.957230732 I0703 11:59:58.478940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 11:59:58.479034 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-03 11:59:58.479024219 +0000 UTC m=+22.973183586 E0703 11:59:58.484238 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 11:59:58.484309 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-03 11:59:58.484301938 +0000 UTC m=+22.978461265 E0703 11:59:58.484337 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 11:59:58.500270 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0703 11:59:58.500498 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 11:59:58.500540 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 11:59:58.500631 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0703 11:59:58.503456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 11:59:58.534176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z82ws" condition "Approved" to 2026-07-03 11:59:58.534159297 +0000 UTC m=+23.028318634 I0703 11:59:58.566591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z82ws" condition "Ready" to 2026-07-03 11:59:58.566577733 +0000 UTC m=+23.060737060 I0703 11:59:58.624069 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 11:59:58.624009495 +0000 UTC m=+23.118168852 I0703 11:59:58.650153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 11:59:58.651202 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 11:59:58.651189642 +0000 UTC m=+23.145349009 I0703 11:59:58.656554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 11:59:58.686857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 11:59:58.687171 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 11:59:58.687161375 +0000 UTC m=+23.181320702 I0703 12:00:03.503557 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:00:03.502915688 +0000 UTC m=+27.997075055 I0703 12:00:27.575318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:00:27.575369 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-03 12:00:27.575342596 +0000 UTC m=+52.069501933 I0703 12:00:27.575916 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-03 12:00:27.575894216 +0000 UTC m=+52.070053573 I0703 12:00:27.596002 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-03 12:00:27.59598999 +0000 UTC m=+52.090149327 I0703 12:00:27.597567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:00:27.598096 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-03 12:00:27.59808581 +0000 UTC m=+52.092245137 I0703 12:00:27.856739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:00:27.893050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dttdl" condition "Approved" to 2026-07-03 12:00:27.893039742 +0000 UTC m=+52.387199079 I0703 12:00:27.920362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dttdl" condition "Ready" to 2026-07-03 12:00:27.920349145 +0000 UTC m=+52.414508492 I0703 12:00:27.957181 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:00:27.957166425 +0000 UTC m=+52.451325752 I0703 12:00:27.981266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:00:27.981583 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:00:27.981575144 +0000 UTC m=+52.475734481 I0703 12:00:27.985468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:00:28.002318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:05:37.274792 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-07-03 12:05:37.274772593 +0000 UTC m=+361.768931920 I0703 12:05:37.275090 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-109.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:05:37.275142 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Issuing" to 2026-07-03 12:05:37.27513531 +0000 UTC m=+361.769294647 I0703 12:05:37.289049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:05:37.289103 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-07-03 12:05:37.289097657 +0000 UTC m=+361.783256974 I0703 12:05:37.676065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:05:37.703143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-mpcjc" condition "Approved" to 2026-07-03 12:05:37.703127856 +0000 UTC m=+362.197287213 I0703 12:05:37.730199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-mpcjc" condition "Ready" to 2026-07-03 12:05:37.730185185 +0000 UTC m=+362.224344522 I0703 12:05:37.757201 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:05:37.757192993 +0000 UTC m=+362.251352330 I0703 12:05:37.777741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:05:37.778262 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:05:37.778251487 +0000 UTC m=+362.272410834 I0703 12:05:37.787941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:05:37.799311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:05:37.799581 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:05:37.799567774 +0000 UTC m=+362.293727111 I0703 12:06:43.569488 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-03 12:06:43.569443142 +0000 UTC m=+428.063602499 I0703 12:06:43.569546 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:06:43.569749 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-03 12:06:43.569612975 +0000 UTC m=+428.063772332 E0703 12:06:43.604280 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 12:06:43.604379 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-03 12:06:43.604368757 +0000 UTC m=+428.098528114 E0703 12:06:43.604512 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 12:06:43.607933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:06:43.608014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:06:43.608200 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-03 12:06:43.608096805 +0000 UTC m=+428.102256172 E0703 12:06:43.618952 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0703 12:06:43.619014 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 12:06:43.619033 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 12:06:43.619114 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0703 12:06:43.783536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:06:43.789981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5qj75" condition "Approved" to 2026-07-03 12:06:43.789972753 +0000 UTC m=+428.284132090 I0703 12:06:43.868564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5qj75" condition "Ready" to 2026-07-03 12:06:43.868550953 +0000 UTC m=+428.362710320 I0703 12:06:43.899677 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:06:43.899667629 +0000 UTC m=+428.393826966 I0703 12:06:43.915487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:06:43.915862 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:06:43.915852967 +0000 UTC m=+428.410012314 I0703 12:06:43.939524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:06:48.620332 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:06:48.620318362 +0000 UTC m=+433.114477729 I0703 12:07:32.923759 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:07:32.923929 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-03 12:07:32.923796016 +0000 UTC m=+477.417955343 I0703 12:07:32.924226 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-03 12:07:32.924222804 +0000 UTC m=+477.418382131 I0703 12:07:32.924429 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-03 12:07:32.924426617 +0000 UTC m=+477.418585944 I0703 12:07:32.924568 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:07:32.924576 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-03 12:07:32.92457411 +0000 UTC m=+477.418733437 I0703 12:07:32.924720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:07:32.924727 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-03 12:07:32.924725293 +0000 UTC m=+477.418884620 I0703 12:07:32.924902 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-03 12:07:32.924899516 +0000 UTC m=+477.419058833 I0703 12:07:33.183463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:33.183530 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-03 12:07:33.183524234 +0000 UTC m=+477.677683561 I0703 12:07:33.183763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:33.183878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:07:33.183907 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-03 12:07:33.183901421 +0000 UTC m=+477.678060738 I0703 12:07:33.187993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:33.188418 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-03 12:07:33.188405567 +0000 UTC m=+477.682564894 I0703 12:07:33.316563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:33.360601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vt822" condition "Approved" to 2026-07-03 12:07:33.360586938 +0000 UTC m=+477.854746265 I0703 12:07:33.382345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vt822" condition "Ready" to 2026-07-03 12:07:33.382332997 +0000 UTC m=+477.876492324 I0703 12:07:33.410296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-x4fff" condition "Approved" to 2026-07-03 12:07:33.410276373 +0000 UTC m=+477.904435700 I0703 12:07:33.425543 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:07:33.42552275 +0000 UTC m=+477.919682067 I0703 12:07:33.430445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-x4fff" condition "Ready" to 2026-07-03 12:07:33.430429022 +0000 UTC m=+477.924588359 I0703 12:07:33.452656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:33.453047 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:07:33.453038058 +0000 UTC m=+477.947197395 I0703 12:07:33.466703 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:07:33.466691375 +0000 UTC m=+477.960850702 I0703 12:07:33.485679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:33.498456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:33.498682 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:07:33.498675847 +0000 UTC m=+477.992835174 I0703 12:07:33.530291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:33.627785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:33.781497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8w7bz" condition "Approved" to 2026-07-03 12:07:33.78147369 +0000 UTC m=+478.275633057 I0703 12:07:34.066711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8w7bz" condition "Ready" to 2026-07-03 12:07:34.06668681 +0000 UTC m=+478.560846167 I0703 12:07:34.323689 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:07:34.323671089 +0000 UTC m=+478.817830426 I0703 12:07:34.428338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:42.458939 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls" condition "Ready" to 2026-07-03 12:07:42.458926646 +0000 UTC m=+486.953085983 I0703 12:07:42.459940 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:07:42.459962 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls" condition "Issuing" to 2026-07-03 12:07:42.459957974 +0000 UTC m=+486.954117311 I0703 12:07:42.476877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:42.477392 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls" condition "Ready" to 2026-07-03 12:07:42.476977146 +0000 UTC m=+486.971136513 I0703 12:07:42.581994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:42.610919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vdgpt-4k9k6" condition "Approved" to 2026-07-03 12:07:42.610911644 +0000 UTC m=+487.105070971 I0703 12:07:42.627608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vdgpt-4k9k6" condition "Ready" to 2026-07-03 12:07:42.627602529 +0000 UTC m=+487.121761856 I0703 12:07:42.665982 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:07:42.665937853 +0000 UTC m=+487.160097180 I0703 12:07:42.682499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:42.682674 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:07:42.682668079 +0000 UTC m=+487.176827406 I0703 12:07:42.701828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vdgpt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:59.472468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:07:59.472500 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-03 12:07:59.472491024 +0000 UTC m=+503.966650351 I0703 12:07:59.472804 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-03 12:07:59.47278987 +0000 UTC m=+503.966949187 I0703 12:07:59.495977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:59.496030 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:07:59.496044 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-03 12:07:59.496038171 +0000 UTC m=+503.990197498 I0703 12:07:59.724710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:59.738728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4g7sx" condition "Approved" to 2026-07-03 12:07:59.738710233 +0000 UTC m=+504.232869590 I0703 12:07:59.766644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4g7sx" condition "Ready" to 2026-07-03 12:07:59.766629652 +0000 UTC m=+504.260788989 I0703 12:07:59.794930 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:07:59.794919248 +0000 UTC m=+504.289078585 I0703 12:07:59.810118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:59.810330 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:07:59.810325121 +0000 UTC m=+504.304484458 I0703 12:07:59.821298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:07:59.832573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:11:23.454639 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-03 12:11:23.454615266 +0000 UTC m=+707.948774633 I0703 12:11:23.454991 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:11:23.455031 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-03 12:11:23.455019574 +0000 UTC m=+707.949178931 I0703 12:11:23.473246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:11:23.473317 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:11:23.473338 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-03 12:11:23.473329931 +0000 UTC m=+707.967489298 I0703 12:11:23.790635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:11:23.833056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8hs8n" condition "Approved" to 2026-07-03 12:11:23.83304725 +0000 UTC m=+708.327206567 I0703 12:11:23.857934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8hs8n" condition "Ready" to 2026-07-03 12:11:23.857924213 +0000 UTC m=+708.352083540 I0703 12:11:23.891828 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:11:23.891814187 +0000 UTC m=+708.385973524 I0703 12:11:23.921715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:12:05.909496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:12:05.909532 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-03 12:12:05.909503983 +0000 UTC m=+750.403663340 I0703 12:12:05.909552 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-03 12:12:05.909536394 +0000 UTC m=+750.403695751 I0703 12:12:05.927259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 12:12:05.927318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 12:12:05.927337 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-03 12:12:05.927329633 +0000 UTC m=+750.421488970 I0703 12:12:06.141913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-nt6vh" condition "Approved" to 2026-07-03 12:12:06.141893299 +0000 UTC m=+750.636052666 I0703 12:12:06.174493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-nt6vh" condition "Ready" to 2026-07-03 12:12:06.174455551 +0000 UTC m=+750.668614888 I0703 12:12:06.208339 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 12:12:06.208322557 +0000 UTC m=+750.702481884 I0703 12:12:06.230975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"