I0702 05:06:28.200240 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0702 05:06:28.200434 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0702 05:06:28.200671 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0702 05:06:28.205916 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0702 05:06:28.206546 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0702 05:06:28.206637 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0702 05:06:28.206645 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0702 05:06:28.209350 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0702 05:06:28.222694 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0702 05:06:28.228125 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0702 05:06:28.234083 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0702 05:06:28.236501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0702 05:06:28.238516 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0702 05:06:28.240264 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0702 05:06:28.242293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0702 05:06:28.245560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0702 05:06:28.248290 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0702 05:06:28.251224 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0702 05:06:28.251267 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0702 05:06:28.253860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0702 05:06:28.255734 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0702 05:06:28.255884 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0702 05:06:28.257651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0702 05:06:28.259612 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0702 05:06:28.259663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0702 05:06:28.261545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0702 05:06:28.263649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0702 05:06:28.265610 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0702 05:06:28.265717 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0702 05:06:28.271524 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0702 05:06:28.271560 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0702 05:06:28.271593 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0702 05:06:28.275701 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0702 05:06:28.279647 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:06:28.280013 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:06:28.280695 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:06:28.283286 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:06:28.296402 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:06:28.323279 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:06:28.340767 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:06:28.352389 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:06:28.368680 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:06:28.374394 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:06:41.676825 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 05:06:41.676807874 +0000 UTC m=+13.505940000 I0702 05:06:42.407010 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 05:06:42.406995803 +0000 UTC m=+14.236127979 I0702 05:06:42.407618 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:06:42.407696 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 05:06:42.407684132 +0000 UTC m=+14.236816298 I0702 05:06:42.423418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:06:42.423539 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 05:06:42.423531401 +0000 UTC m=+14.252663547 E0702 05:06:42.424083 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 05:06:42.424136 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 05:06:42.424130217 +0000 UTC m=+14.253262363 E0702 05:06:42.424155 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 05:06:42.437624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0702 05:06:42.439987 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0702 05:06:42.440146 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 05:06:42.440187 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 05:06:42.440225 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0702 05:06:42.443732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8cr6f" condition "Approved" to 2026-07-02 05:06:42.443720907 +0000 UTC m=+14.272853083 I0702 05:06:42.449362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:06:42.449431 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 05:06:42.449423702 +0000 UTC m=+14.278555868 I0702 05:06:42.459255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8cr6f" condition "Ready" to 2026-07-02 05:06:42.459241618 +0000 UTC m=+14.288373754 I0702 05:06:42.490668 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:06:42.489754374 +0000 UTC m=+14.318886530 I0702 05:06:42.514363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:06:42.514612 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:06:42.514604866 +0000 UTC m=+14.343737012 I0702 05:06:42.517727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:06:42.528848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:06:42.529791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:06:42.530136 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:06:42.530125006 +0000 UTC m=+14.359257152 I0702 05:06:47.441062 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:06:47.441021174 +0000 UTC m=+19.270153350 I0702 05:07:09.622343 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 05:07:09.622305075 +0000 UTC m=+41.451437231 I0702 05:07:09.622815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:07:09.622883 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 05:07:09.622875648 +0000 UTC m=+41.452007804 I0702 05:07:09.638667 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 05:07:09.638654815 +0000 UTC m=+41.467786951 I0702 05:07:09.652220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:07:09.652266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:07:09.652281 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 05:07:09.652273274 +0000 UTC m=+41.481405410 I0702 05:07:09.823060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g4p4j" condition "Approved" to 2026-07-02 05:07:09.82304607 +0000 UTC m=+41.652178236 I0702 05:07:09.852076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g4p4j" condition "Ready" to 2026-07-02 05:07:09.852060217 +0000 UTC m=+41.681192393 I0702 05:07:09.887714 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:07:09.887699584 +0000 UTC m=+41.716831740 I0702 05:07:09.912287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:07:09.912780 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:07:09.912771142 +0000 UTC m=+41.741903288 I0702 05:07:09.932692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:21.078517 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-07-02 05:11:21.078482735 +0000 UTC m=+292.907614911 I0702 05:11:21.078796 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:11:21.078911 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-07-02 05:11:21.078852155 +0000 UTC m=+292.907984291 I0702 05:11:21.096513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:21.096590 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-07-02 05:11:21.096582689 +0000 UTC m=+292.925714835 I0702 05:11:21.204463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:21.233776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-hrj4k" condition "Approved" to 2026-07-02 05:11:21.233760847 +0000 UTC m=+293.062893023 I0702 05:11:21.256984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-hrj4k" condition "Ready" to 2026-07-02 05:11:21.25697362 +0000 UTC m=+293.086105766 I0702 05:11:21.280818 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:21.28081032 +0000 UTC m=+293.109942466 I0702 05:11:21.304123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:21.304897 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:21.304888666 +0000 UTC m=+293.134020812 I0702 05:11:21.312893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:21.324899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:21.325409 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:21.325397265 +0000 UTC m=+293.154529441 I0702 05:12:25.264792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:12:25.264788 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 05:12:25.264743717 +0000 UTC m=+357.093875913 I0702 05:12:25.264837 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 05:12:25.264826499 +0000 UTC m=+357.093958675 E0702 05:12:25.278052 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 05:12:25.278113 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 05:12:25.278104726 +0000 UTC m=+357.107236872 E0702 05:12:25.278162 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 05:12:25.279958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:12:25.280046 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 05:12:25.280038821 +0000 UTC m=+357.109170967 E0702 05:12:25.287971 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0702 05:12:25.288087 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 05:12:25.288140 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 05:12:25.288197 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0702 05:12:25.292641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:12:25.292715 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 05:12:25.292708003 +0000 UTC m=+357.121840149 I0702 05:12:25.298963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-c74wl" condition "Approved" to 2026-07-02 05:12:25.298949417 +0000 UTC m=+357.128081563 I0702 05:12:25.310821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-c74wl" condition "Ready" to 2026-07-02 05:12:25.31075449 +0000 UTC m=+357.139886646 I0702 05:12:25.328127 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:12:25.32811193 +0000 UTC m=+357.157244076 I0702 05:12:25.358931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:12:30.288635 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:12:30.288614495 +0000 UTC m=+362.117746671 I0702 05:13:09.464959 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:13:09.465003 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 05:13:09.464998722 +0000 UTC m=+401.294130858 I0702 05:13:09.465224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:13:09.465228 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 05:13:09.465223147 +0000 UTC m=+401.294355273 I0702 05:13:09.465240 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 05:13:09.465237697 +0000 UTC m=+401.294369833 I0702 05:13:09.465449 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 05:13:09.465446132 +0000 UTC m=+401.294578258 I0702 05:13:09.483346 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 05:13:09.483331771 +0000 UTC m=+401.312463917 I0702 05:13:09.483632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:13:09.501570 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 05:13:09.501553798 +0000 UTC m=+401.330685934 I0702 05:13:09.513048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:09.513105 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 05:13:09.513100372 +0000 UTC m=+401.342232508 I0702 05:13:09.517082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:09.517138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:13:09.517163 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 05:13:09.517156468 +0000 UTC m=+401.346288614 I0702 05:13:09.529894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:09.529997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:13:09.530035 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 05:13:09.530029701 +0000 UTC m=+401.359161827 I0702 05:13:09.648104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:09.695307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q89xw" condition "Approved" to 2026-07-02 05:13:09.695296396 +0000 UTC m=+401.524428532 I0702 05:13:09.757506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q89xw" condition "Ready" to 2026-07-02 05:13:09.757491995 +0000 UTC m=+401.586624131 I0702 05:13:09.788016 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:13:09.788001662 +0000 UTC m=+401.617133788 I0702 05:13:09.811282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:09.820897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lcwsq" condition "Approved" to 2026-07-02 05:13:09.82088584 +0000 UTC m=+401.650017966 I0702 05:13:09.835856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lcwsq" condition "Ready" to 2026-07-02 05:13:09.835848566 +0000 UTC m=+401.664980712 I0702 05:13:09.862362 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:13:09.862351738 +0000 UTC m=+401.691483884 I0702 05:13:09.863171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:09.954898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:10.057022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:10.212781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-phdbh" condition "Approved" to 2026-07-02 05:13:10.212764321 +0000 UTC m=+402.041896467 I0702 05:13:10.513119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-phdbh" condition "Ready" to 2026-07-02 05:13:10.513108881 +0000 UTC m=+402.342241017 I0702 05:13:10.955700 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:13:10.955687141 +0000 UTC m=+402.784819287 I0702 05:13:11.055783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:18.676719 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wdr6v-tls" condition "Ready" to 2026-07-02 05:13:18.676680156 +0000 UTC m=+410.505812302 I0702 05:13:18.677039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wdr6v-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:13:18.677624 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wdr6v-tls" condition "Issuing" to 2026-07-02 05:13:18.677529613 +0000 UTC m=+410.506661779 I0702 05:13:18.691155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wdr6v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wdr6v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:18.691277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wdr6v-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:13:18.691329 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wdr6v-tls" condition "Issuing" to 2026-07-02 05:13:18.691319511 +0000 UTC m=+410.520451657 I0702 05:13:18.949099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wdr6v-w9qpw" condition "Approved" to 2026-07-02 05:13:18.949084528 +0000 UTC m=+410.778216684 I0702 05:13:18.972807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wdr6v-w9qpw" condition "Ready" to 2026-07-02 05:13:18.972791013 +0000 UTC m=+410.801923169 I0702 05:13:19.004203 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wdr6v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:13:19.00418875 +0000 UTC m=+410.833320886 I0702 05:13:19.026270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wdr6v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wdr6v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:29.998248 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 05:13:29.998194467 +0000 UTC m=+421.827326613 I0702 05:13:29.998734 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:13:29.998755 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 05:13:29.998750428 +0000 UTC m=+421.827882574 I0702 05:13:30.015634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:30.017136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:13:30.017167 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 05:13:30.017160107 +0000 UTC m=+421.846292243 I0702 05:13:30.188724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-k8hkw" condition "Approved" to 2026-07-02 05:13:30.188709706 +0000 UTC m=+422.017841852 I0702 05:13:30.213055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-k8hkw" condition "Ready" to 2026-07-02 05:13:30.213045006 +0000 UTC m=+422.042177152 I0702 05:13:30.259734 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:13:30.259713054 +0000 UTC m=+422.088845230 I0702 05:13:30.284103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:30.284570 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:13:30.284562253 +0000 UTC m=+422.113694419 I0702 05:13:30.307780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:13:30.308048 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:13:30.308041865 +0000 UTC m=+422.137174001 I0702 05:16:45.238150 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 05:16:45.23812655 +0000 UTC m=+617.067258726 I0702 05:16:45.238276 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:16:45.238347 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 05:16:45.238338034 +0000 UTC m=+617.067470210 I0702 05:16:45.256859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:16:45.256935 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 05:16:45.256926249 +0000 UTC m=+617.086058425 I0702 05:16:45.478893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:16:45.521804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b5c4h" condition "Approved" to 2026-07-02 05:16:45.521793985 +0000 UTC m=+617.350926131 I0702 05:16:45.548891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b5c4h" condition "Ready" to 2026-07-02 05:16:45.548879669 +0000 UTC m=+617.378011805 I0702 05:16:45.582745 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:16:45.582727121 +0000 UTC m=+617.411859287 I0702 05:16:45.600186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:16:45.601074 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:16:45.601066581 +0000 UTC m=+617.430198707 I0702 05:16:45.622483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:16:45.622784 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:16:45.622777542 +0000 UTC m=+617.451909668 I0702 05:16:45.623029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:17:24.473118 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 05:17:24.473107267 +0000 UTC m=+656.302239413 I0702 05:17:24.473376 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:17:24.473395 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 05:17:24.473391262 +0000 UTC m=+656.302523408 I0702 05:17:24.500271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:17:24.500322 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 05:17:24.500316567 +0000 UTC m=+656.329448703 I0702 05:17:24.705455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:17:24.731178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hds97" condition "Approved" to 2026-07-02 05:17:24.731166287 +0000 UTC m=+656.560298433 I0702 05:17:24.753976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-hds97" condition "Ready" to 2026-07-02 05:17:24.753966881 +0000 UTC m=+656.583099017 I0702 05:17:24.788700 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:17:24.788686621 +0000 UTC m=+656.617818787 I0702 05:17:24.808605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:17:24.808906 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:17:24.80889737 +0000 UTC m=+656.638029516 I0702 05:17:24.816993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:17:24.834930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"