I0704 10:00:50.257421 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0704 10:00:50.257564 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0704 10:00:50.261004 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0704 10:00:50.261032 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0704 10:00:50.261043 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0704 10:00:50.261392 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0704 10:00:50.261423 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0704 10:00:50.261503 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0704 10:00:50.263916 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0704 10:00:50.277735 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0704 10:00:50.285681 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0704 10:00:50.289679 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0704 10:00:50.292677 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0704 10:00:50.295118 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0704 10:00:50.298866 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0704 10:00:50.302178 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0704 10:00:50.303837 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0704 10:00:50.304043 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0704 10:00:50.305751 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0704 10:00:50.307437 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0704 10:00:50.309315 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0704 10:00:50.310967 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0704 10:00:50.310984 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0704 10:00:50.310990 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0704 10:00:50.311119 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0704 10:00:50.315672 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0704 10:00:50.318183 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0704 10:00:50.320540 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0704 10:00:50.322900 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0704 10:00:50.322923 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0704 10:00:50.322938 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0704 10:00:50.324971 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0704 10:00:50.326726 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0704 10:00:50.328849 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0704 10:00:50.333846 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:00:50.333881 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:00:50.334875 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:00:50.334984 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:00:50.335200 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:00:50.335280 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:00:50.349665 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:00:50.365050 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:00:50.379085 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:00:50.402823 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:00:50.415186 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0704 10:01:04.325064 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-04 10:01:04.325041166 +0000 UTC m=+14.091449964 I0704 10:01:05.060262 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:01:05.060309 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-04 10:01:05.060299648 +0000 UTC m=+14.826708466 I0704 10:01:05.060473 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-04 10:01:05.060458001 +0000 UTC m=+14.826866819 E0704 10:01:05.120209 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0704 10:01:05.120277 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-04 10:01:05.120267684 +0000 UTC m=+14.886676502 E0704 10:01:05.120311 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0704 10:01:05.121211 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:01:05.121300 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:01:05.121370 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-04 10:01:05.121320955 +0000 UTC m=+14.887729783 E0704 10:01:05.155389 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0704 10:01:05.158144 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0704 10:01:05.158284 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0704 10:01:05.158364 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0704 10:01:05.218265 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:01:05.235052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-04 10:01:05.235040576 +0000 UTC m=+15.001449374 I0704 10:01:05.263025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-04 10:01:05.263014825 +0000 UTC m=+15.029423623 I0704 10:01:05.309039 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:01:05.308941046 +0000 UTC m=+15.075349874 I0704 10:01:05.326023 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:01:05.399765 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:01:10.156113 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:01:10.156092147 +0000 UTC m=+19.922500975 I0704 10:01:39.391855 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:01:39.391922 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-04 10:01:39.391914927 +0000 UTC m=+49.158323725 I0704 10:01:39.393059 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-04 10:01:39.391569951 +0000 UTC m=+49.157978779 I0704 10:01:39.408400 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-04 10:01:39.40834823 +0000 UTC m=+49.174757068 I0704 10:01:39.421674 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:01:39.421866 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:01:39.421916 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-04 10:01:39.421908714 +0000 UTC m=+49.188317502 I0704 10:01:39.702744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-04 10:01:39.702729761 +0000 UTC m=+49.469138559 I0704 10:01:39.734572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-04 10:01:39.734553259 +0000 UTC m=+49.500962057 I0704 10:01:39.761768 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:01:39.761756918 +0000 UTC m=+49.528165716 I0704 10:01:39.788374 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:01:39.789439 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:01:39.789429885 +0000 UTC m=+49.555838683 I0704 10:01:39.806750 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:01:39.807745 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:06:37.372744 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-07-04 10:06:37.372710484 +0000 UTC m=+347.139119262 I0704 10:06:37.373257 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:06:37.373288 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-07-04 10:06:37.373285295 +0000 UTC m=+347.139694083 I0704 10:06:37.387392 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:06:37.387615 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:06:37.387670 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-07-04 10:06:37.387642113 +0000 UTC m=+347.154050911 I0704 10:06:37.601618 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:06:37.613032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-1" condition "Approved" to 2026-07-04 10:06:37.612953469 +0000 UTC m=+347.379362257 I0704 10:06:37.631160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-1" condition "Ready" to 2026-07-04 10:06:37.631150383 +0000 UTC m=+347.397559171 I0704 10:06:37.654285 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:06:37.654270696 +0000 UTC m=+347.420679524 I0704 10:06:37.664936 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:06:37.665779 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:06:37.665770095 +0000 UTC m=+347.432178893 I0704 10:06:37.674387 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:06:37.676688 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:07:43.352045 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-04 10:07:43.351997892 +0000 UTC m=+413.118406710 I0704 10:07:43.352077 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:07:43.352176 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-04 10:07:43.352164595 +0000 UTC m=+413.118573413 I0704 10:07:43.363404 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:07:43.365645 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-04 10:07:43.365631841 +0000 UTC m=+413.132040679 E0704 10:07:43.370391 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0704 10:07:43.370496 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-04 10:07:43.37048707 +0000 UTC m=+413.136895868 E0704 10:07:43.370544 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0704 10:07:43.381063 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0704 10:07:43.381200 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0704 10:07:43.381254 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0704 10:07:43.381284 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0704 10:07:43.382714 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:07:43.409845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-04 10:07:43.409833921 +0000 UTC m=+413.176242719 I0704 10:07:43.425247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-04 10:07:43.425233543 +0000 UTC m=+413.191642371 I0704 10:07:43.442366 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:07:43.442352686 +0000 UTC m=+413.208761484 I0704 10:07:43.454446 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:07:43.455598 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:07:43.455588609 +0000 UTC m=+413.221997417 I0704 10:07:43.470943 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:07:43.471224 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:07:43.471214965 +0000 UTC m=+413.237623763 I0704 10:07:48.381653 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:07:48.381640687 +0000 UTC m=+418.148049505 I0704 10:08:32.088859 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-04 10:08:32.088819648 +0000 UTC m=+461.855228436 I0704 10:08:32.089169 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:08:32.089205 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-04 10:08:32.089197125 +0000 UTC m=+461.855605913 I0704 10:08:32.091805 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:08:32.091830 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-04 10:08:32.091826661 +0000 UTC m=+461.858235449 I0704 10:08:32.091989 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-04 10:08:32.091985614 +0000 UTC m=+461.858394402 I0704 10:08:32.092131 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-04 10:08:32.092128166 +0000 UTC m=+461.858536954 I0704 10:08:32.092429 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:08:32.092445 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-04 10:08:32.092441822 +0000 UTC m=+461.858850610 I0704 10:08:32.128361 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:32.128429 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-04 10:08:32.128421742 +0000 UTC m=+461.894830530 I0704 10:08:32.128662 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:32.129580 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-04 10:08:32.129567232 +0000 UTC m=+461.895976040 I0704 10:08:32.139784 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:32.140018 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:08:32.140133 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-04 10:08:32.140125857 +0000 UTC m=+461.906534655 I0704 10:08:32.353043 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:32.476383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-04 10:08:32.476370338 +0000 UTC m=+462.242779126 I0704 10:08:32.511404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-04 10:08:32.511393882 +0000 UTC m=+462.277802660 I0704 10:08:32.513867 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:32.529318 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:32.541068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-04 10:08:32.541056372 +0000 UTC m=+462.307465160 I0704 10:08:32.542572 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:08:32.542566538 +0000 UTC m=+462.308975316 I0704 10:08:32.553033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-04 10:08:32.553022121 +0000 UTC m=+462.319430909 I0704 10:08:32.560213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-04 10:08:32.560204857 +0000 UTC m=+462.326613645 I0704 10:08:32.571252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-04 10:08:32.571235341 +0000 UTC m=+462.337644169 I0704 10:08:32.576796 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:32.578228 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:08:32.578222313 +0000 UTC m=+462.344631101 I0704 10:08:32.925302 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:32.925941 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:08:32.925932855 +0000 UTC m=+462.692341643 I0704 10:08:33.078688 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:08:33.07867754 +0000 UTC m=+462.845086338 I0704 10:08:33.130950 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:08:33.130935575 +0000 UTC m=+462.897344373 I0704 10:08:33.325202 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:33.325667 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:08:33.325660925 +0000 UTC m=+463.092069713 I0704 10:08:33.424676 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:33.425441 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:08:33.425432251 +0000 UTC m=+463.191841069 I0704 10:08:33.773828 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:33.825786 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:47.585635 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:08:47.585680 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" condition "Issuing" to 2026-07-04 10:08:47.585669127 +0000 UTC m=+477.352077945 I0704 10:08:47.585700 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" condition "Ready" to 2026-07-04 10:08:47.585684088 +0000 UTC m=+477.352092886 I0704 10:08:47.598453 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:47.598534 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:08:47.598559 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" condition "Issuing" to 2026-07-04 10:08:47.598552961 +0000 UTC m=+477.364961759 I0704 10:08:47.811658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls-1" condition "Approved" to 2026-07-04 10:08:47.811646104 +0000 UTC m=+477.578054902 I0704 10:08:47.828491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls-1" condition "Ready" to 2026-07-04 10:08:47.828478296 +0000 UTC m=+477.594887094 I0704 10:08:47.863303 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:08:47.863292189 +0000 UTC m=+477.629700977 I0704 10:08:47.874714 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:47.875166 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:08:47.875159385 +0000 UTC m=+477.641568163 I0704 10:08:47.884198 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:47.889477 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:08:47.893357 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jr4sr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:09:19.296264 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:09:19.296262 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-04 10:09:19.296237853 +0000 UTC m=+509.062646651 I0704 10:09:19.296305 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-04 10:09:19.296296654 +0000 UTC m=+509.062705442 I0704 10:09:19.315018 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:09:19.315099 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:09:19.315126 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-04 10:09:19.315118964 +0000 UTC m=+509.081527752 I0704 10:09:19.531482 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:09:19.550640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-04 10:09:19.550623367 +0000 UTC m=+509.317032155 I0704 10:09:19.576909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-04 10:09:19.576899134 +0000 UTC m=+509.343307922 I0704 10:09:19.607679 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:09:19.607664687 +0000 UTC m=+509.374073475 I0704 10:09:19.623956 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:12:31.052860 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-04 10:12:31.052842458 +0000 UTC m=+700.819251256 I0704 10:12:31.053013 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:12:31.053087 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-04 10:12:31.053079595 +0000 UTC m=+700.819488383 I0704 10:12:31.065533 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:12:31.065638 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:12:31.065665 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-04 10:12:31.06565849 +0000 UTC m=+700.832067278 I0704 10:12:31.413084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-04 10:12:31.413070986 +0000 UTC m=+701.179479784 I0704 10:12:31.428667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-04 10:12:31.428656438 +0000 UTC m=+701.195065236 I0704 10:12:31.472370 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:12:31.472360915 +0000 UTC m=+701.238769713 I0704 10:12:31.485182 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:12:31.485663 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:12:31.485655773 +0000 UTC m=+701.252064571 I0704 10:12:31.498598 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:13:16.351728 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0704 10:13:16.352242 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-04 10:13:16.352233282 +0000 UTC m=+746.118642090 I0704 10:13:16.352354 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-04 10:13:16.352334045 +0000 UTC m=+746.118742843 I0704 10:13:16.368027 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:13:16.368409 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-04 10:13:16.368400254 +0000 UTC m=+746.134809062 I0704 10:13:16.509030 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0704 10:13:16.535996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-04 10:13:16.535985408 +0000 UTC m=+746.302394196 I0704 10:13:16.547321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-04 10:13:16.547311406 +0000 UTC m=+746.313720214 I0704 10:13:16.570781 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-04 10:13:16.570771227 +0000 UTC m=+746.337180035 I0704 10:13:16.583373 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"