I0725 04:21:46.458251 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0725 04:21:46.458416 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0725 04:21:46.458680 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0725 04:21:46.463180 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0725 04:21:46.463934 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0725 04:21:46.464106 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0725 04:21:46.464350 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0725 04:21:46.473015 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0725 04:21:46.490764 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0725 04:21:46.491012 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0725 04:21:46.494963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0725 04:21:46.497765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0725 04:21:46.500483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0725 04:21:46.504138 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0725 04:21:46.504180 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0725 04:21:46.505786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0725 04:21:46.508972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0725 04:21:46.511934 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0725 04:21:46.514347 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0725 04:21:46.516863 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0725 04:21:46.516969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0725 04:21:46.519617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0725 04:21:46.521708 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0725 04:21:46.523534 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0725 04:21:46.523554 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0725 04:21:46.523694 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0725 04:21:46.530405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0725 04:21:46.534077 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0725 04:21:46.537165 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0725 04:21:46.540152 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0725 04:21:46.542825 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0725 04:21:46.545195 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0725 04:21:46.548183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0725 04:21:46.551073 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0725 04:21:46.551845 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0725 04:21:46.552805 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0725 04:21:46.553319 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0725 04:21:46.573199 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0725 04:21:46.587175 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0725 04:21:46.609738 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0725 04:21:46.620514 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0725 04:21:46.632059 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0725 04:21:46.646715 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0725 04:21:56.987298 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-25 04:21:56.987258506 +0000 UTC m=+10.566442934 I0725 04:21:57.749912 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-25 04:21:57.749900327 +0000 UTC m=+11.329084745 I0725 04:21:57.750498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:21:57.750566 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 04:21:57.750557249 +0000 UTC m=+11.329741707 E0725 04:21:57.766545 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0725 04:21:57.766627 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-25 04:21:57.766620398 +0000 UTC m=+11.345804826 E0725 04:21:57.766656 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0725 04:21:57.767152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:21:57.767307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:21:57.767430 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-25 04:21:57.767328193 +0000 UTC m=+11.346512621 E0725 04:21:57.780702 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0725 04:21:57.780811 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0725 04:21:57.780847 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0725 04:21:57.780904 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0725 04:21:57.819069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vcpdq" condition "Approved" to 2026-07-25 04:21:57.819059161 +0000 UTC m=+11.398243589 I0725 04:21:57.831005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vcpdq" condition "Ready" to 2026-07-25 04:21:57.830992245 +0000 UTC m=+11.410176673 I0725 04:21:57.851542 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:21:57.851532248 +0000 UTC m=+11.430716666 I0725 04:21:57.872179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:22:02.781664 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:22:02.781646097 +0000 UTC m=+16.360830545 I0725 04:22:25.424229 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-25 04:22:25.424181219 +0000 UTC m=+39.003365637 I0725 04:22:25.424615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:22:25.424659 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-25 04:22:25.424655495 +0000 UTC m=+39.003839913 I0725 04:22:25.453980 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-25 04:22:25.453963188 +0000 UTC m=+39.033147606 I0725 04:22:25.478334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:22:25.479694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:22:25.479770 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-25 04:22:25.479759679 +0000 UTC m=+39.058944117 I0725 04:22:25.681862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rvt6r" condition "Approved" to 2026-07-25 04:22:25.681844123 +0000 UTC m=+39.261028571 I0725 04:22:25.716823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rvt6r" condition "Ready" to 2026-07-25 04:22:25.716803174 +0000 UTC m=+39.295987602 I0725 04:22:25.763801 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:22:25.763786185 +0000 UTC m=+39.342970613 I0725 04:22:25.790433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:22:25.790736 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:22:25.790729899 +0000 UTC m=+39.369914307 I0725 04:22:25.822063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:26:32.860085 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-07-25 04:26:32.859919567 +0000 UTC m=+286.439103985 I0725 04:26:32.860475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:26:32.860607 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-07-25 04:26:32.860581262 +0000 UTC m=+286.439765680 I0725 04:26:32.872929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:26:32.872996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:26:32.873014 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-07-25 04:26:32.873005923 +0000 UTC m=+286.452190341 I0725 04:26:33.126298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:26:33.135980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-f8jvm" condition "Approved" to 2026-07-25 04:26:33.135966173 +0000 UTC m=+286.715150601 I0725 04:26:33.168100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-f8jvm" condition "Ready" to 2026-07-25 04:26:33.168085078 +0000 UTC m=+286.747269516 I0725 04:26:33.192091 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:26:33.192076301 +0000 UTC m=+286.771260759 I0725 04:26:33.213923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:26:33.256147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:27:38.294223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:27:38.294267 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-25 04:27:38.294241583 +0000 UTC m=+351.873426041 I0725 04:27:38.294275 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-25 04:27:38.294260484 +0000 UTC m=+351.873444932 E0725 04:27:38.312112 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0725 04:27:38.312173 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-25 04:27:38.3121528 +0000 UTC m=+351.891337228 E0725 04:27:38.312418 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0725 04:27:38.315616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:27:38.315734 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-25 04:27:38.315727214 +0000 UTC m=+351.894911642 E0725 04:27:38.339692 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0725 04:27:38.339879 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0725 04:27:38.339931 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0725 04:27:38.340014 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0725 04:27:38.349917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:27:38.349960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:27:38.350167 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-25 04:27:38.350158078 +0000 UTC m=+351.929342526 I0725 04:27:38.350870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m8pwv" condition "Approved" to 2026-07-25 04:27:38.350865102 +0000 UTC m=+351.930049520 I0725 04:27:38.374934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m8pwv" condition "Ready" to 2026-07-25 04:27:38.374920944 +0000 UTC m=+351.954105382 I0725 04:27:38.418771 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:27:38.418759976 +0000 UTC m=+351.997944404 I0725 04:27:38.443404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:27:38.443781 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:27:38.443769191 +0000 UTC m=+352.022953619 I0725 04:27:38.477406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:27:43.340988 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:27:43.340972788 +0000 UTC m=+356.920157236 I0725 04:28:27.090815 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-25 04:28:27.090778361 +0000 UTC m=+400.669962769 I0725 04:28:27.090927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:28:27.090962 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-25 04:28:27.090954838 +0000 UTC m=+400.670139256 I0725 04:28:27.126413 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-25 04:28:27.126393568 +0000 UTC m=+400.705577986 I0725 04:28:27.125119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:28:27.141580 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-25 04:28:27.141563417 +0000 UTC m=+400.720747855 I0725 04:28:27.142193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:28:27.143731 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-25 04:28:27.143724057 +0000 UTC m=+400.722908495 I0725 04:28:27.142270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:27.144005 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-25 04:28:27.143998289 +0000 UTC m=+400.723182737 I0725 04:28:27.142382 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-25 04:28:27.142197383 +0000 UTC m=+400.721381791 I0725 04:28:27.193181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:27.193370 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-25 04:28:27.193360636 +0000 UTC m=+400.772545064 I0725 04:28:27.193858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:27.193939 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-25 04:28:27.193933971 +0000 UTC m=+400.773118399 I0725 04:28:27.435907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:27.541334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:27.629893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:27.692918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-knxrn" condition "Approved" to 2026-07-25 04:28:27.692900552 +0000 UTC m=+401.272085010 I0725 04:28:27.723575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-b8lgd" condition "Approved" to 2026-07-25 04:28:27.723563464 +0000 UTC m=+401.302747882 I0725 04:28:27.761604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-knxrn" condition "Ready" to 2026-07-25 04:28:27.761591771 +0000 UTC m=+401.340776189 I0725 04:28:27.784516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-b8lgd" condition "Ready" to 2026-07-25 04:28:27.784498241 +0000 UTC m=+401.363682659 I0725 04:28:27.834714 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:28:27.834699404 +0000 UTC m=+401.413883822 I0725 04:28:27.895301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:27.895448 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:28:27.895431964 +0000 UTC m=+401.474616382 I0725 04:28:27.895778 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:28:27.895769828 +0000 UTC m=+401.474954256 I0725 04:28:27.959024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:27.959043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:27.959272 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:28:27.959264573 +0000 UTC m=+401.538448991 I0725 04:28:28.025896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:28.188221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n94lk" condition "Approved" to 2026-07-25 04:28:28.188191749 +0000 UTC m=+401.767376227 I0725 04:28:28.539866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n94lk" condition "Ready" to 2026-07-25 04:28:28.539848537 +0000 UTC m=+402.119032985 I0725 04:28:28.741247 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-n94lk" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-vjvp5" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0725 04:28:28.931335 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-vjvp5\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0725 04:28:28.984789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wqkkw" condition "Approved" to 2026-07-25 04:28:28.984766945 +0000 UTC m=+402.563951373 I0725 04:28:29.096777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wqkkw" condition "Ready" to 2026-07-25 04:28:29.096764174 +0000 UTC m=+402.675948602 I0725 04:28:29.533110 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:28:29.533086701 +0000 UTC m=+403.112271159 I0725 04:28:29.633494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:29.634116 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:28:29.634103903 +0000 UTC m=+403.213288351 I0725 04:28:29.882717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:29.932195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:30.029195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:35.236953 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" condition "Ready" to 2026-07-25 04:28:35.236934907 +0000 UTC m=+408.816119325 I0725 04:28:35.237009 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:28:35.237051 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" condition "Issuing" to 2026-07-25 04:28:35.237043892 +0000 UTC m=+408.816228310 I0725 04:28:35.257390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:35.257491 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" condition "Ready" to 2026-07-25 04:28:35.257484617 +0000 UTC m=+408.836669045 I0725 04:28:35.576410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:35.603400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-b7zqw-79mfw" condition "Approved" to 2026-07-25 04:28:35.60338275 +0000 UTC m=+409.182567178 I0725 04:28:35.622525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-b7zqw-79mfw" condition "Ready" to 2026-07-25 04:28:35.62251314 +0000 UTC m=+409.201697558 I0725 04:28:35.648232 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:28:35.648213958 +0000 UTC m=+409.227398386 I0725 04:28:35.672533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:35.672901 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:28:35.672892453 +0000 UTC m=+409.252076881 I0725 04:28:35.692886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:35.696820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:35.697175 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-b7zqw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:28:35.697167031 +0000 UTC m=+409.276351449 I0725 04:28:46.481091 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-25 04:28:46.481059953 +0000 UTC m=+420.060244371 I0725 04:28:46.481180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:28:46.481771 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-25 04:28:46.481741763 +0000 UTC m=+420.060926181 I0725 04:28:46.512089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:28:46.512228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:28:46.512268 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-25 04:28:46.512257687 +0000 UTC m=+420.091442145 I0725 04:28:46.693761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b56pb" condition "Approved" to 2026-07-25 04:28:46.693749368 +0000 UTC m=+420.272933776 I0725 04:28:46.715732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-b56pb" condition "Ready" to 2026-07-25 04:28:46.715719002 +0000 UTC m=+420.294903420 I0725 04:28:46.758490 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:28:46.758476128 +0000 UTC m=+420.337660546 I0725 04:28:46.793310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:31:57.990318 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-25 04:31:57.99029519 +0000 UTC m=+611.569479638 I0725 04:31:57.990926 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:31:57.990956 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-25 04:31:57.990950634 +0000 UTC m=+611.570135082 I0725 04:31:58.027833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:31:58.028048 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-25 04:31:58.028037641 +0000 UTC m=+611.607222079 I0725 04:31:58.138854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:31:58.170034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ltlml" condition "Approved" to 2026-07-25 04:31:58.170019932 +0000 UTC m=+611.749204360 I0725 04:31:58.201541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ltlml" condition "Ready" to 2026-07-25 04:31:58.201528955 +0000 UTC m=+611.780713373 I0725 04:31:58.233909 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:31:58.233896272 +0000 UTC m=+611.813080690 I0725 04:31:58.263741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:32:40.125664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0725 04:32:40.125700 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-25 04:32:40.125691765 +0000 UTC m=+653.704876193 I0725 04:32:40.125864 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-25 04:32:40.125859144 +0000 UTC m=+653.705043562 I0725 04:32:40.146106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:32:40.146180 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-25 04:32:40.146172141 +0000 UTC m=+653.725356569 I0725 04:32:40.283571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:32:40.318925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-txclf" condition "Approved" to 2026-07-25 04:32:40.318908694 +0000 UTC m=+653.898093102 I0725 04:32:40.342331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-txclf" condition "Ready" to 2026-07-25 04:32:40.342317426 +0000 UTC m=+653.921501854 I0725 04:32:40.376841 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-25 04:32:40.376823042 +0000 UTC m=+653.956007470 I0725 04:32:40.410031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0725 04:32:40.473774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"