I0715 14:25:56.884354 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0715 14:25:56.884583 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0715 14:25:56.889636 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0715 14:25:56.889682 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0715 14:25:56.889701 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0715 14:25:56.891415 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0715 14:25:56.892165 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0715 14:25:56.892370 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0715 14:25:56.897862 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0715 14:25:56.910711 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0715 14:25:56.913961 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0715 14:25:56.916279 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0715 14:25:56.922302 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0715 14:25:56.924969 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0715 14:25:56.927392 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0715 14:25:56.927411 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0715 14:25:56.927417 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0715 14:25:56.927430 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0715 14:25:56.929370 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0715 14:25:56.931438 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0715 14:25:56.936849 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0715 14:25:56.939857 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0715 14:25:56.939892 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0715 14:25:56.942749 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0715 14:25:56.945430 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0715 14:25:56.947964 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0715 14:25:56.949743 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0715 14:25:56.949769 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0715 14:25:56.949999 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0715 14:25:56.952134 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0715 14:25:56.956343 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0715 14:25:56.959580 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0715 14:25:56.961638 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0715 14:25:56.963653 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0715 14:25:56.966755 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:25:56.967243 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:25:56.967332 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:25:56.967409 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:25:56.967729 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:25:56.968390 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:25:56.987406 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:25:57.003569 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:25:57.021496 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:25:57.039900 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:25:57.061821 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0715 14:26:07.436921 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-15 14:26:07.436900503 +0000 UTC m=+10.577004225 I0715 14:26:08.197413 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-15 14:26:08.197401654 +0000 UTC m=+11.337505386 I0715 14:26:08.197462 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:26:08.197551 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-15 14:26:08.197541589 +0000 UTC m=+11.337645341 E0715 14:26:08.212169 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0715 14:26:08.212716 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:26:08.212874 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-15 14:26:08.212865207 +0000 UTC m=+11.352968929 I0715 14:26:08.213637 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-15 14:26:08.213623586 +0000 UTC m=+11.353727308 E0715 14:26:08.213674 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0715 14:26:08.229387 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0715 14:26:08.229947 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0715 14:26:08.230046 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0715 14:26:08.230102 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0715 14:26:08.230007 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:26:08.261397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-15 14:26:08.261387187 +0000 UTC m=+11.401490909 I0715 14:26:08.286638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-15 14:26:08.286624273 +0000 UTC m=+11.426728015 I0715 14:26:08.312689 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:26:08.312679509 +0000 UTC m=+11.452783231 I0715 14:26:08.325514 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:26:08.326871 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:26:08.326858825 +0000 UTC m=+11.466962547 I0715 14:26:08.342095 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:26:13.230048 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:26:13.230035998 +0000 UTC m=+16.370139720 I0715 14:26:36.140375 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:26:36.140457 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-15 14:26:36.140449575 +0000 UTC m=+39.280553297 I0715 14:26:36.140306 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-15 14:26:36.14028609 +0000 UTC m=+39.280389842 I0715 14:26:36.148282 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-15 14:26:36.148270012 +0000 UTC m=+39.288373734 I0715 14:26:36.156922 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:26:36.157033 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-15 14:26:36.157021949 +0000 UTC m=+39.297125701 I0715 14:26:36.337664 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:26:36.363301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-15 14:26:36.363290249 +0000 UTC m=+39.503393971 I0715 14:26:36.385879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-15 14:26:36.38586682 +0000 UTC m=+39.525970542 I0715 14:26:36.411683 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:26:36.411668746 +0000 UTC m=+39.551772478 I0715 14:26:36.434125 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:26:36.436174 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:26:36.43616434 +0000 UTC m=+39.576268052 I0715 14:26:36.439362 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:26:36.453243 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:31:11.127625 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-162.nip.io-tls" condition "Ready" to 2026-07-15 14:31:11.127611238 +0000 UTC m=+314.267714980 I0715 14:31:11.128058 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:31:11.128104 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-162.nip.io-tls" condition "Issuing" to 2026-07-15 14:31:11.128097957 +0000 UTC m=+314.268201699 I0715 14:31:11.140048 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:31:11.140168 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:31:11.140245 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-162.nip.io-tls" condition "Issuing" to 2026-07-15 14:31:11.140198207 +0000 UTC m=+314.280301929 I0715 14:31:11.542996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-162.nip.io-tls-1" condition "Approved" to 2026-07-15 14:31:11.542978354 +0000 UTC m=+314.683082076 I0715 14:31:11.562605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-162.nip.io-tls-1" condition "Ready" to 2026-07-15 14:31:11.562593326 +0000 UTC m=+314.702697058 I0715 14:31:11.587845 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:31:11.587825506 +0000 UTC m=+314.727929228 I0715 14:31:11.605440 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:31:11.606052 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:31:11.606043895 +0000 UTC m=+314.746147617 I0715 14:31:11.617658 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:32:26.970965 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-15 14:32:26.970946073 +0000 UTC m=+390.111049815 I0715 14:32:26.973561 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:32:26.973648 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-15 14:32:26.973636757 +0000 UTC m=+390.113740499 I0715 14:32:27.031735 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0715 14:32:27.031822 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0715 14:32:27.031875 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-15 14:32:27.031868982 +0000 UTC m=+390.171972684 E0715 14:32:27.031896 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0715 14:32:27.032236 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:32:27.032254 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-15 14:32:27.032250568 +0000 UTC m=+390.172354280 E0715 14:32:27.042990 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0715 14:32:27.043509 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0715 14:32:27.043534 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0715 14:32:27.043721 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0715 14:32:27.066409 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:32:27.071637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-15 14:32:27.071625029 +0000 UTC m=+390.211728751 I0715 14:32:27.084257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-15 14:32:27.084249677 +0000 UTC m=+390.224353389 I0715 14:32:27.105484 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:32:27.105469289 +0000 UTC m=+390.245573001 I0715 14:32:27.120367 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:32:27.120835 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:32:27.120827212 +0000 UTC m=+390.260930924 I0715 14:32:27.133495 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:32:32.044041 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:32:32.044027127 +0000 UTC m=+395.184130879 I0715 14:33:15.287046 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-15 14:33:15.287037335 +0000 UTC m=+438.427141047 I0715 14:33:15.287852 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:33:15.287870 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-15 14:33:15.287867229 +0000 UTC m=+438.427970941 I0715 14:33:15.288043 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:33:15.288060 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-15 14:33:15.288055346 +0000 UTC m=+438.428159058 I0715 14:33:15.288344 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-15 14:33:15.288332789 +0000 UTC m=+438.428436501 I0715 14:33:15.291150 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-15 14:33:15.291145505 +0000 UTC m=+438.431249217 I0715 14:33:15.291374 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:33:15.291395 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-15 14:33:15.291392816 +0000 UTC m=+438.431496528 I0715 14:33:15.328283 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:15.328436 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:33:15.328474 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-15 14:33:15.328466063 +0000 UTC m=+438.468569785 I0715 14:33:15.331892 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:15.332000 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:33:15.332034 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-15 14:33:15.33202724 +0000 UTC m=+438.472130952 I0715 14:33:15.336907 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:15.336991 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:33:15.337029 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-15 14:33:15.337023077 +0000 UTC m=+438.477126789 I0715 14:33:15.505707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-15 14:33:15.505697642 +0000 UTC m=+438.645801354 I0715 14:33:15.522685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-15 14:33:15.522674535 +0000 UTC m=+438.662778247 I0715 14:33:15.554962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-15 14:33:15.554948304 +0000 UTC m=+438.695052036 I0715 14:33:15.571898 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:33:15.571935 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-15 14:33:15.571927208 +0000 UTC m=+438.712030920 I0715 14:33:15.573072 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:33:15.573065215 +0000 UTC m=+438.713168927 I0715 14:33:15.588761 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:15.597891 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:15.601575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-15 14:33:15.601565476 +0000 UTC m=+438.741669178 I0715 14:33:15.662812 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:33:15.662800056 +0000 UTC m=+438.802903768 I0715 14:33:15.684400 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:15.727671 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:16.080276 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:16.239871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-15 14:33:16.239857814 +0000 UTC m=+439.379961526 I0715 14:33:16.334571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-15 14:33:16.334558892 +0000 UTC m=+439.474662614 I0715 14:33:16.784047 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:33:16.78403634 +0000 UTC m=+439.924140062 I0715 14:33:16.879048 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:16.879640 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:33:16.879630856 +0000 UTC m=+440.019734578 I0715 14:33:17.077821 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:24.575654 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" condition "Ready" to 2026-07-15 14:33:24.575639553 +0000 UTC m=+447.715743275 I0715 14:33:24.575771 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:33:24.575812 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" condition "Issuing" to 2026-07-15 14:33:24.575803329 +0000 UTC m=+447.715907041 I0715 14:33:24.588343 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:24.591463 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" condition "Ready" to 2026-07-15 14:33:24.591450305 +0000 UTC m=+447.731554027 I0715 14:33:24.903798 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:24.933648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls-1" condition "Approved" to 2026-07-15 14:33:24.933637712 +0000 UTC m=+448.073741424 I0715 14:33:24.960214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls-1" condition "Ready" to 2026-07-15 14:33:24.960202712 +0000 UTC m=+448.100306424 I0715 14:33:24.989782 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:33:24.989772135 +0000 UTC m=+448.129875857 I0715 14:33:25.005418 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:25.006116 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:33:25.006108138 +0000 UTC m=+448.146211860 I0715 14:33:25.013375 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:25.027325 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vmlz2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:38.113557 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:33:38.113561 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-15 14:33:38.113545824 +0000 UTC m=+461.253649566 I0715 14:33:38.113600 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-15 14:33:38.113593206 +0000 UTC m=+461.253696938 I0715 14:33:38.126588 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:38.126746 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:33:38.126810 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-15 14:33:38.126802217 +0000 UTC m=+461.266905939 I0715 14:33:38.470527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-15 14:33:38.470513158 +0000 UTC m=+461.610616870 I0715 14:33:38.489461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-15 14:33:38.489447805 +0000 UTC m=+461.629551517 I0715 14:33:38.512594 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:33:38.512576779 +0000 UTC m=+461.652680511 I0715 14:33:38.526340 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:33:38.526919 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:33:38.526912555 +0000 UTC m=+461.667016257 I0715 14:33:38.545933 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:37:03.064324 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-15 14:37:03.064311074 +0000 UTC m=+666.204414786 I0715 14:37:03.064737 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:37:03.064880 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-15 14:37:03.06487087 +0000 UTC m=+666.204974592 I0715 14:37:03.078262 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:37:03.078340 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:37:03.078372 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-15 14:37:03.078363225 +0000 UTC m=+666.218466947 I0715 14:37:03.236789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-15 14:37:03.236775949 +0000 UTC m=+666.376879661 I0715 14:37:03.254708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-15 14:37:03.254695568 +0000 UTC m=+666.394799300 I0715 14:37:03.288712 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:37:03.288699625 +0000 UTC m=+666.428803347 I0715 14:37:03.307933 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:38:13.498271 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0715 14:38:13.498298 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-15 14:38:13.498274663 +0000 UTC m=+736.638378385 I0715 14:38:13.498331 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-15 14:38:13.498325704 +0000 UTC m=+736.638429406 I0715 14:38:13.511547 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:38:13.511904 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-15 14:38:13.511888592 +0000 UTC m=+736.651992354 I0715 14:38:13.707561 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:38:13.737706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-15 14:38:13.737689781 +0000 UTC m=+736.877793503 I0715 14:38:13.753143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-15 14:38:13.753129167 +0000 UTC m=+736.893232899 I0715 14:38:13.785874 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:38:13.785860065 +0000 UTC m=+736.925963777 I0715 14:38:13.804835 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:38:13.806137 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:38:13.806127474 +0000 UTC m=+736.946231196 I0715 14:38:13.809241 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:38:13.823629 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0715 14:38:13.824331 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 14:38:13.824318589 +0000 UTC m=+736.964422321