I0703 14:59:41.411841       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0703 14:59:41.412036       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0703 14:59:41.416625       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0703 14:59:41.416661       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0703 14:59:41.416671       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0703 14:59:41.417025       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0703 14:59:41.417106       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0703 14:59:41.417240       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0703 14:59:41.419561       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0703 14:59:41.432567       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0703 14:59:41.432850       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0703 14:59:41.432890       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0703 14:59:41.432897       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0703 14:59:41.439642       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0703 14:59:41.442627       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0703 14:59:41.444761       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0703 14:59:41.446617       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0703 14:59:41.448659       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0703 14:59:41.448745       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0703 14:59:41.452870       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0703 14:59:41.453083       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0703 14:59:41.457141       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0703 14:59:41.460983       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0703 14:59:41.463017       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0703 14:59:41.465028       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0703 14:59:41.467111       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0703 14:59:41.470572       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0703 14:59:41.474688       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0703 14:59:41.477169       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0703 14:59:41.479692       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0703 14:59:41.481704       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0703 14:59:41.483872       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0703 14:59:41.485693       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0703 14:59:41.485769       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0703 14:59:41.489119       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:41.489507       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:41.489706       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:41.491563       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:41.491848       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:41.504724       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:41.521244       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:41.543389       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:41.577498       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:41.595184       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:41.615864       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0703 14:59:53.745224       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-03 14:59:53.745192237 +0000 UTC m=+12.363543881
I0703 14:59:54.444802       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 14:59:54.444881       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-03 14:59:54.444872557 +0000 UTC m=+13.063224201
I0703 14:59:54.446341       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-03 14:59:54.446332891 +0000 UTC m=+13.064684535
E0703 14:59:54.459230       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0703 14:59:54.459271       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-03 14:59:54.459264876 +0000 UTC m=+13.077616520
E0703 14:59:54.459314       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0703 14:59:54.460420       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 14:59:54.460671       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-03 14:59:54.460618566 +0000 UTC m=+13.078970220
E0703 14:59:54.468015       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0703 14:59:54.468161       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0703 14:59:54.468215       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0703 14:59:54.468326       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0703 14:59:54.478370       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 14:59:54.514693       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-03 14:59:54.514681769 +0000 UTC m=+13.133033413
I0703 14:59:54.541445       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-03 14:59:54.541432339 +0000 UTC m=+13.159783983
I0703 14:59:54.563539       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 14:59:54.563527415 +0000 UTC m=+13.181879059
I0703 14:59:54.576027       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 14:59:54.616080       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 14:59:59.468950       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 14:59:59.468937034 +0000 UTC m=+18.087288698
I0703 15:00:21.212978       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:00:21.213028       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-03 15:00:21.213021906 +0000 UTC m=+39.831373540
I0703 15:00:21.213005       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-03 15:00:21.212969554 +0000 UTC m=+39.831321188
I0703 15:00:21.225613       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:00:21.225687       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:00:21.225716       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-03 15:00:21.225709853 +0000 UTC m=+39.844061497
I0703 15:00:21.225994       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-03 15:00:21.225984022 +0000 UTC m=+39.844335656
I0703 15:00:21.455456       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-03 15:00:21.455445616 +0000 UTC m=+40.073797260
I0703 15:00:21.487930       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-03 15:00:21.487912072 +0000 UTC m=+40.106263726
I0703 15:00:21.511365       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:00:21.511352162 +0000 UTC m=+40.129703806
I0703 15:00:21.528115       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:00:21.528920       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:00:21.528909509 +0000 UTC m=+40.147261183
I0703 15:00:21.534355       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:00:21.546618       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:04:23.901298       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:04:23.901511       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready" to 2026-07-03 15:04:23.901498901 +0000 UTC m=+282.519850545
I0703 15:04:23.901537       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-07-03 15:04:23.901365686 +0000 UTC m=+282.519717330
I0703 15:04:23.911627       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:04:23.911752       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:04:23.911795       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-07-03 15:04:23.91178706 +0000 UTC m=+282.530138704
I0703 15:04:24.207941       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:04:24.223840       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-1" condition "Approved" to 2026-07-03 15:04:24.223827087 +0000 UTC m=+282.842178751
I0703 15:04:24.241253       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-1" condition "Ready" to 2026-07-03 15:04:24.241239126 +0000 UTC m=+282.859590780
I0703 15:04:24.261239       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:04:24.261226776 +0000 UTC m=+282.879578420
I0703 15:04:24.273822       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:04:24.274708       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:04:24.274697239 +0000 UTC m=+282.893048883
I0703 15:04:24.287136       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:05:28.571169       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:05:28.571180       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-03 15:05:28.571152911 +0000 UTC m=+347.189504555
I0703 15:05:28.571206       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-03 15:05:28.571197662 +0000 UTC m=+347.189549296
I0703 15:05:28.585734       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:05:28.585866       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-03 15:05:28.585854427 +0000 UTC m=+347.204206101
E0703 15:05:28.585885       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0703 15:05:28.585937       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-03 15:05:28.58592908 +0000 UTC m=+347.204280724
E0703 15:05:28.585963       1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0703 15:05:28.599988       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack"
E0703 15:05:28.600069       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0703 15:05:28.600097       1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0703 15:05:28.600126       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack"
I0703 15:05:28.602464       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:05:28.606608       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:05:28.625583       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-03 15:05:28.625565323 +0000 UTC m=+347.243916997
I0703 15:05:28.639877       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-03 15:05:28.639864716 +0000 UTC m=+347.258216391
I0703 15:05:28.659395       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:05:28.659257935 +0000 UTC m=+347.277609589
I0703 15:05:28.675512       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:05:28.675792       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:05:28.675782697 +0000 UTC m=+347.294134341
I0703 15:05:28.685952       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:05:33.600964       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:05:33.60094498 +0000 UTC m=+352.219296654
I0703 15:06:14.493297       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:06:14.493369       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-03 15:06:14.4933358 +0000 UTC m=+393.111687444
I0703 15:06:14.504824       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:06:14.504862       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-03 15:06:14.5048533 +0000 UTC m=+393.123204924
I0703 15:06:14.505489       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-03 15:06:14.505473966 +0000 UTC m=+393.123825600
I0703 15:06:14.506296       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-03 15:06:14.506291478 +0000 UTC m=+393.124643112
I0703 15:06:14.508432       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-03 15:06:14.508427023 +0000 UTC m=+393.126778657
I0703 15:06:14.515593       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:06:14.515629       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-03 15:06:14.515620671 +0000 UTC m=+393.133972295
I0703 15:06:14.527313       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:14.527455       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:14.527556       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-03 15:06:14.527547922 +0000 UTC m=+393.145899556
I0703 15:06:14.532385       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:06:14.532407       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-03 15:06:14.532401839 +0000 UTC m=+393.150753473
I0703 15:06:14.536739       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:14.536918       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-03 15:06:14.536908906 +0000 UTC m=+393.155260550
I0703 15:06:14.642089       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:14.726366       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-03 15:06:14.726347307 +0000 UTC m=+393.344698981
I0703 15:06:14.752383       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-03 15:06:14.752367975 +0000 UTC m=+393.370719619
I0703 15:06:14.776335       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:06:14.77631337 +0000 UTC m=+393.394665034
I0703 15:06:14.800259       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:15.012322       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-03 15:06:15.012308514 +0000 UTC m=+393.630660158
I0703 15:06:15.026285       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-03 15:06:15.026270126 +0000 UTC m=+393.644621780
I0703 15:06:15.057359       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:06:15.057344384 +0000 UTC m=+393.675696018
I0703 15:06:15.076312       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:15.097696       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:15.326201       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-03 15:06:15.326181824 +0000 UTC m=+393.944533468
I0703 15:06:15.427647       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-03 15:06:15.427631462 +0000 UTC m=+394.045983106
I0703 15:06:15.926617       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:06:15.926595606 +0000 UTC m=+394.544947250
I0703 15:06:16.021730       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:16.022672       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:06:16.022653142 +0000 UTC m=+394.641004816
I0703 15:06:16.218990       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:22.792374       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:06:22.792448       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls" condition "Issuing" to 2026-07-03 15:06:22.792428697 +0000 UTC m=+401.410780351
I0703 15:06:22.793050       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls" condition "Ready" to 2026-07-03 15:06:22.793029652 +0000 UTC m=+401.411381346
I0703 15:06:22.807320       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:22.807634       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls" condition "Ready" to 2026-07-03 15:06:22.807620964 +0000 UTC m=+401.425972638
I0703 15:06:23.174101       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:23.205734       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls-1" condition "Approved" to 2026-07-03 15:06:23.205715313 +0000 UTC m=+401.824066947
I0703 15:06:23.222165       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls-1" condition "Ready" to 2026-07-03 15:06:23.222150771 +0000 UTC m=+401.840502415
I0703 15:06:23.245960       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:06:23.245943665 +0000 UTC m=+401.864295309
I0703 15:06:23.263277       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:23.305179       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nf5cm-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:35.088664       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:06:35.088706       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-03 15:06:35.088697585 +0000 UTC m=+413.707049219
I0703 15:06:35.089046       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-03 15:06:35.089039624 +0000 UTC m=+413.707391258
I0703 15:06:35.108368       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:35.108542       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:06:35.108604       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-03 15:06:35.108589565 +0000 UTC m=+413.726941219
I0703 15:06:35.340020       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-03 15:06:35.339996074 +0000 UTC m=+413.958347708
I0703 15:06:35.355060       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-03 15:06:35.355047244 +0000 UTC m=+413.973398878
I0703 15:06:35.395824       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:06:35.395808046 +0000 UTC m=+414.014159690
I0703 15:06:35.407350       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:06:35.468887       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:09:52.298503       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-03 15:09:52.29848105 +0000 UTC m=+610.916832744
I0703 15:09:52.299141       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:09:52.299423       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-03 15:09:52.299414017 +0000 UTC m=+610.917765681
I0703 15:09:52.311264       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:09:52.311592       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-03 15:09:52.311576596 +0000 UTC m=+610.929928240
I0703 15:09:52.494897       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:09:52.528801       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-03 15:09:52.528787851 +0000 UTC m=+611.147139485
I0703 15:09:52.544980       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-03 15:09:52.544970483 +0000 UTC m=+611.163322127
I0703 15:09:52.568940       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:09:52.568929895 +0000 UTC m=+611.187281539
I0703 15:09:52.582993       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:10:34.556272       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0703 15:10:34.556361       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-03 15:10:34.556338168 +0000 UTC m=+653.174689832
I0703 15:10:34.556896       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-03 15:10:34.556888178 +0000 UTC m=+653.175239842
I0703 15:10:34.565672       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:10:34.567525       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-03 15:10:34.567504004 +0000 UTC m=+653.185855668
I0703 15:10:34.749581       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:10:34.788059       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-03 15:10:34.788045889 +0000 UTC m=+653.406397523
I0703 15:10:34.805762       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-03 15:10:34.805752899 +0000 UTC m=+653.424104543
I0703 15:10:34.828322       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:10:34.828297254 +0000 UTC m=+653.446648898
I0703 15:10:34.842969       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:10:34.843491       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 15:10:34.8434819 +0000 UTC m=+653.461833544
I0703 15:10:34.860340       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0703 15:10:34.861255       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"