I0706 23:09:12.038849 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0706 23:09:12.039023 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0706 23:09:12.039164 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0706 23:09:12.044845 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0706 23:09:12.045651 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0706 23:09:12.045829 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0706 23:09:12.045871 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0706 23:09:12.048120 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0706 23:09:12.065897 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0706 23:09:12.073325 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0706 23:09:12.073406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0706 23:09:12.076458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0706 23:09:12.078949 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0706 23:09:12.080953 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0706 23:09:12.082830 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0706 23:09:12.084524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0706 23:09:12.088615 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0706 23:09:12.093156 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0706 23:09:12.096941 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0706 23:09:12.096979 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0706 23:09:12.096994 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0706 23:09:12.097027 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0706 23:09:12.099076 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0706 23:09:12.100706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0706 23:09:12.102603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0706 23:09:12.104323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0706 23:09:12.105910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0706 23:09:12.112279 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0706 23:09:12.115189 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0706 23:09:12.115314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0706 23:09:12.117687 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0706 23:09:12.117801 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0706 23:09:12.120250 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0706 23:09:12.123620 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0706 23:09:12.123713 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0706 23:09:12.124027 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0706 23:09:12.139623 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0706 23:09:12.162961 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0706 23:09:12.191508 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0706 23:09:12.210774 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0706 23:09:12.255640 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0706 23:09:12.255714 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0706 23:09:12.260741 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0706 23:09:29.633974 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-06 23:09:29.633887258 +0000 UTC m=+17.625590377 I0706 23:09:30.323239 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-06 23:09:30.323221639 +0000 UTC m=+18.314924748 I0706 23:09:30.323608 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:09:30.323675 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-06 23:09:30.323666854 +0000 UTC m=+18.315369963 E0706 23:09:30.336071 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0706 23:09:30.337395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:09:30.337447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:09:30.337475 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-06 23:09:30.3374662 +0000 UTC m=+18.329169289 I0706 23:09:30.336139 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-06 23:09:30.336130495 +0000 UTC m=+18.327833584 E0706 23:09:30.338213 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0706 23:09:30.351621 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0706 23:09:30.351713 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0706 23:09:30.351746 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0706 23:09:30.351779 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0706 23:09:30.377476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-p86gx" condition "Approved" to 2026-07-06 23:09:30.377466082 +0000 UTC m=+18.369169171 I0706 23:09:30.390248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-p86gx" condition "Ready" to 2026-07-06 23:09:30.390238314 +0000 UTC m=+18.381941413 I0706 23:09:30.414299 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:09:30.414241385 +0000 UTC m=+18.405944494 I0706 23:09:30.434008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:09:30.475881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:09:35.352872 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:09:35.352828832 +0000 UTC m=+23.344531941 I0706 23:09:57.652880 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-06 23:09:57.652842869 +0000 UTC m=+45.644545988 I0706 23:09:57.653166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:09:57.653308 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-06 23:09:57.653208579 +0000 UTC m=+45.644911698 I0706 23:09:57.670601 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-06 23:09:57.670592249 +0000 UTC m=+45.662295338 I0706 23:09:57.720814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:09:57.720874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:09:57.720890 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-06 23:09:57.720884927 +0000 UTC m=+45.712588016 I0706 23:09:58.129703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5vm6q" condition "Approved" to 2026-07-06 23:09:58.129692442 +0000 UTC m=+46.121395531 I0706 23:09:58.161518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5vm6q" condition "Ready" to 2026-07-06 23:09:58.161507564 +0000 UTC m=+46.153210653 I0706 23:09:58.196160 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:09:58.196150104 +0000 UTC m=+46.187853193 I0706 23:09:58.216353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:09:58.217888 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:09:58.2175171 +0000 UTC m=+46.209220189 I0706 23:09:58.230754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:09:58.242591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:09:58.242826 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:09:58.242818724 +0000 UTC m=+46.234521803 I0706 23:14:14.767477 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:14:14.767435 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready" to 2026-07-06 23:14:14.76739416 +0000 UTC m=+302.759097269 I0706 23:14:14.767514 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Issuing" to 2026-07-06 23:14:14.767509764 +0000 UTC m=+302.759212853 I0706 23:14:14.788560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:14:14.788629 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready" to 2026-07-06 23:14:14.788621226 +0000 UTC m=+302.780324305 I0706 23:14:14.963327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:14:14.990803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-pkfrj" condition "Approved" to 2026-07-06 23:14:14.990790806 +0000 UTC m=+302.982493915 I0706 23:14:15.028839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-pkfrj" condition "Ready" to 2026-07-06 23:14:15.028831935 +0000 UTC m=+303.020535024 I0706 23:14:15.057607 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:14:15.057592398 +0000 UTC m=+303.049295487 I0706 23:14:15.077014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:14:15.077541 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:14:15.077531311 +0000 UTC m=+303.069234400 I0706 23:14:15.080283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:14:15.093439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:14:15.093685 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:14:15.093677444 +0000 UTC m=+303.085380533 I0706 23:15:23.271498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:15:23.271557 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-06 23:15:23.2715446 +0000 UTC m=+371.263247709 I0706 23:15:23.271551 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-06 23:15:23.27153179 +0000 UTC m=+371.263234899 I0706 23:15:23.285407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:15:23.285471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:15:23.285520 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-06 23:15:23.285514897 +0000 UTC m=+371.277217986 E0706 23:15:23.285747 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0706 23:15:23.285793 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-06 23:15:23.285784764 +0000 UTC m=+371.277487853 E0706 23:15:23.285857 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0706 23:15:23.293474 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0706 23:15:23.293641 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0706 23:15:23.293712 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0706 23:15:23.293789 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0706 23:15:23.321232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-94crn" condition "Approved" to 2026-07-06 23:15:23.321222194 +0000 UTC m=+371.312925283 I0706 23:15:23.333330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-94crn" condition "Ready" to 2026-07-06 23:15:23.333319162 +0000 UTC m=+371.325022261 I0706 23:15:23.354555 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:15:23.354535678 +0000 UTC m=+371.346238797 I0706 23:15:23.368525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:15:28.294862 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:15:28.294839861 +0000 UTC m=+376.286542980 I0706 23:16:10.528364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:16:10.528427 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-06 23:16:10.528388912 +0000 UTC m=+418.520091991 I0706 23:16:10.528579 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-06 23:16:10.528575717 +0000 UTC m=+418.520278796 I0706 23:16:10.528811 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-06 23:16:10.528807112 +0000 UTC m=+418.520510191 I0706 23:16:10.529017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:16:10.529030 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-06 23:16:10.529027218 +0000 UTC m=+418.520730297 I0706 23:16:10.537794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:16:10.537820 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-06 23:16:10.537815227 +0000 UTC m=+418.529518306 I0706 23:16:10.538038 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-06 23:16:10.538034402 +0000 UTC m=+418.529737481 I0706 23:16:10.567970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:10.568099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:16:10.568116 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-06 23:16:10.568112179 +0000 UTC m=+418.559815258 I0706 23:16:10.584392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:10.584457 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-06 23:16:10.584450279 +0000 UTC m=+418.576153358 I0706 23:16:10.584670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:10.584698 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-06 23:16:10.584695704 +0000 UTC m=+418.576398773 I0706 23:16:10.685656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:10.730755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g6c7p" condition "Approved" to 2026-07-06 23:16:10.730742726 +0000 UTC m=+418.722445815 I0706 23:16:10.748398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g6c7p" condition "Ready" to 2026-07-06 23:16:10.748384567 +0000 UTC m=+418.740087666 I0706 23:16:10.774428 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:16:10.774412707 +0000 UTC m=+418.766115816 I0706 23:16:10.793932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:10.794288 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:16:10.794282771 +0000 UTC m=+418.785985860 I0706 23:16:10.821040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:10.821355 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:16:10.821346306 +0000 UTC m=+418.813049395 I0706 23:16:10.848303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:10.856392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qwhcd" condition "Approved" to 2026-07-06 23:16:10.856379701 +0000 UTC m=+418.848082780 I0706 23:16:10.876729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qwhcd" condition "Ready" to 2026-07-06 23:16:10.876713756 +0000 UTC m=+418.868416865 I0706 23:16:10.899744 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:16:10.899728085 +0000 UTC m=+418.891431174 I0706 23:16:10.965329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:11.313425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:11.473121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7j77m" condition "Approved" to 2026-07-06 23:16:11.473105124 +0000 UTC m=+419.464808213 I0706 23:16:11.575993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7j77m" condition "Ready" to 2026-07-06 23:16:11.575982592 +0000 UTC m=+419.567685681 I0706 23:16:12.017666 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:16:12.017644471 +0000 UTC m=+420.009347560 I0706 23:16:12.118418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:12.118725 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:16:12.118719622 +0000 UTC m=+420.110422701 I0706 23:16:12.315605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:19.113315 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls" condition "Ready" to 2026-07-06 23:16:19.113293906 +0000 UTC m=+427.104997065 I0706 23:16:19.113757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:16:19.113807 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls" condition "Issuing" to 2026-07-06 23:16:19.113796938 +0000 UTC m=+427.105500057 I0706 23:16:19.128194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:19.128362 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls" condition "Ready" to 2026-07-06 23:16:19.128353129 +0000 UTC m=+427.120056198 I0706 23:16:19.624588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:19.725737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ttcf5-shxk5" condition "Approved" to 2026-07-06 23:16:19.72569676 +0000 UTC m=+427.717399849 I0706 23:16:19.781473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ttcf5-shxk5" condition "Ready" to 2026-07-06 23:16:19.781463189 +0000 UTC m=+427.773166278 I0706 23:16:19.820890 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:16:19.820874154 +0000 UTC m=+427.812577233 I0706 23:16:19.838878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:19.884774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ttcf5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:32.227446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:16:32.227479 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-06 23:16:32.22747189 +0000 UTC m=+440.219174979 I0706 23:16:32.227793 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-06 23:16:32.227761046 +0000 UTC m=+440.219464135 I0706 23:16:32.243466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:32.243557 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-06 23:16:32.24354936 +0000 UTC m=+440.235252449 I0706 23:16:32.556397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:32.588835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g6pm5" condition "Approved" to 2026-07-06 23:16:32.588821395 +0000 UTC m=+440.580524514 I0706 23:16:32.610173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g6pm5" condition "Ready" to 2026-07-06 23:16:32.610162976 +0000 UTC m=+440.601866065 I0706 23:16:32.637901 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:16:32.637878782 +0000 UTC m=+440.629581871 I0706 23:16:32.654508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:16:32.655096 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:16:32.655088678 +0000 UTC m=+440.646791767 I0706 23:16:32.670736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:19:58.175680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:19:58.175762 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-06 23:19:58.175755981 +0000 UTC m=+646.167459060 I0706 23:19:58.176092 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-06 23:19:58.176088228 +0000 UTC m=+646.167791307 I0706 23:19:58.203556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:19:58.203625 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-06 23:19:58.20361831 +0000 UTC m=+646.195321389 I0706 23:19:58.409882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:19:58.450821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4tqff" condition "Approved" to 2026-07-06 23:19:58.450806731 +0000 UTC m=+646.442509810 I0706 23:19:58.468650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4tqff" condition "Ready" to 2026-07-06 23:19:58.468638316 +0000 UTC m=+646.460341405 I0706 23:19:58.505408 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:19:58.505392177 +0000 UTC m=+646.497095256 I0706 23:19:58.521962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:20:36.406271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:20:36.406335 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-06 23:20:36.406328084 +0000 UTC m=+684.398031173 I0706 23:20:36.406545 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-06 23:20:36.406539308 +0000 UTC m=+684.398242397 I0706 23:20:36.424207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:20:36.424274 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0706 23:20:36.424289 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-06 23:20:36.424283707 +0000 UTC m=+684.415986776 I0706 23:20:36.782967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h5p2c" condition "Approved" to 2026-07-06 23:20:36.78295522 +0000 UTC m=+684.774658309 I0706 23:20:36.804314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h5p2c" condition "Ready" to 2026-07-06 23:20:36.804304298 +0000 UTC m=+684.796007387 I0706 23:20:36.833814 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:20:36.833791012 +0000 UTC m=+684.825494101 I0706 23:20:36.866691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:20:36.866968 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-06 23:20:36.866961286 +0000 UTC m=+684.858664365 I0706 23:20:36.879739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0706 23:20:36.890306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"