I0729 13:40:08.507130 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0729 13:40:08.507490 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0729 13:40:08.513723 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0729 13:40:08.513752 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0729 13:40:08.513767 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0729 13:40:08.514335 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0729 13:40:08.514396 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0729 13:40:08.514456 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0729 13:40:08.518645 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0729 13:40:08.534191 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0729 13:40:08.541826 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0729 13:40:08.541876 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0729 13:40:08.541877 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0729 13:40:08.544786 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0729 13:40:08.550221 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0729 13:40:08.552958 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0729 13:40:08.555312 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0729 13:40:08.557752 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0729 13:40:08.560247 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0729 13:40:08.560320 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0729 13:40:08.566610 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0729 13:40:08.566783 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0729 13:40:08.570539 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0729 13:40:08.573457 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0729 13:40:08.575316 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0729 13:40:08.577014 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0729 13:40:08.577031 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0729 13:40:08.577123 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0729 13:40:08.579325 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0729 13:40:08.581492 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0729 13:40:08.583301 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0729 13:40:08.585798 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0729 13:40:08.591316 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0729 13:40:08.594752 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0729 13:40:08.598187 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:08.599602 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:08.599694 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:08.599932 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:08.600229 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:08.626437 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:08.638237 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:08.655910 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:08.671919 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:08.699054 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:08.728232 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 13:40:24.445950 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-29 13:40:24.445195331 +0000 UTC m=+15.983749954 I0729 13:40:25.229167 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:40:25.229240 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-29 13:40:25.229229999 +0000 UTC m=+16.767784622 I0729 13:40:25.230393 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-29 13:40:25.230384214 +0000 UTC m=+16.768938837 I0729 13:40:25.243677 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:40:25.243723 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-29 13:40:25.243719247 +0000 UTC m=+16.782273840 E0729 13:40:25.244072 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0729 13:40:25.244102 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-29 13:40:25.244097376 +0000 UTC m=+16.782651969 E0729 13:40:25.244136 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 13:40:25.261142 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0729 13:40:25.261368 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 13:40:25.261428 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 13:40:25.262156 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0729 13:40:25.263501 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:40:25.297317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-29 13:40:25.297295816 +0000 UTC m=+16.835850429 I0729 13:40:25.322557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-29 13:40:25.322540653 +0000 UTC m=+16.861095266 I0729 13:40:25.350366 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:40:25.350336034 +0000 UTC m=+16.888890657 I0729 13:40:25.364183 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:40:25.364571 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:40:25.364561676 +0000 UTC m=+16.903116269 I0729 13:40:25.372597 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:40:25.379332 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:40:30.262424 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:40:30.262408277 +0000 UTC m=+21.800962890 I0729 13:41:00.593942 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-29 13:41:00.593889158 +0000 UTC m=+52.132443751 I0729 13:41:00.594495 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:41:00.594590 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-29 13:41:00.594580989 +0000 UTC m=+52.133135572 I0729 13:41:00.603725 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-29 13:41:00.603710389 +0000 UTC m=+52.142264972 I0729 13:41:00.611704 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:41:00.611871 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:41:00.611956 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-29 13:41:00.611898751 +0000 UTC m=+52.150453334 I0729 13:41:00.927841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-29 13:41:00.92782688 +0000 UTC m=+52.466381473 I0729 13:41:00.963687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-29 13:41:00.963673412 +0000 UTC m=+52.502228005 I0729 13:41:00.991254 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:41:00.99123794 +0000 UTC m=+52.529792543 I0729 13:41:01.006736 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:41:01.007515 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:41:01.007501469 +0000 UTC m=+52.546056072 I0729 13:41:01.025802 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:41:01.029472 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:46:08.815292 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready" to 2026-07-29 13:46:08.815249067 +0000 UTC m=+360.353803680 I0729 13:46:08.815823 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-35.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:46:08.815899 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Issuing" to 2026-07-29 13:46:08.815888954 +0000 UTC m=+360.354443547 I0729 13:46:09.109934 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:46:09.110138 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-35.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:46:09.110213 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Issuing" to 2026-07-29 13:46:09.110202749 +0000 UTC m=+360.648757372 I0729 13:46:10.169278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-1" condition "Approved" to 2026-07-29 13:46:10.16924145 +0000 UTC m=+361.707796063 I0729 13:46:10.522934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-35.nip.io-tls-1" condition "Ready" to 2026-07-29 13:46:10.522918879 +0000 UTC m=+362.061473492 I0729 13:46:11.665848 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:46:11.665829648 +0000 UTC m=+363.204384261 I0729 13:46:11.810837 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:46:11.812274 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-35.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:46:11.812266789 +0000 UTC m=+363.350821382 I0729 13:46:12.327436 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-35.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-35.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:48:04.038331 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:48:04.038410 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-29 13:48:04.038399921 +0000 UTC m=+475.576954544 I0729 13:48:04.038407 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-29 13:48:04.03838157 +0000 UTC m=+475.576936233 E0729 13:48:04.058167 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0729 13:48:04.058253 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-29 13:48:04.058244326 +0000 UTC m=+475.596798919 E0729 13:48:04.058274 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0729 13:48:04.059466 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:48:04.059682 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-29 13:48:04.059669143 +0000 UTC m=+475.598223756 E0729 13:48:04.073307 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0729 13:48:04.073359 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 13:48:04.073378 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 13:48:04.073453 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0729 13:48:04.079006 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:48:04.114290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-29 13:48:04.114275951 +0000 UTC m=+475.652830554 I0729 13:48:04.129855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-29 13:48:04.129845478 +0000 UTC m=+475.668400071 I0729 13:48:04.152637 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:48:04.152627719 +0000 UTC m=+475.691182312 I0729 13:48:04.167067 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:48:04.167550 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:48:04.167538745 +0000 UTC m=+475.706093348 I0729 13:48:04.182913 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:48:09.074413 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:48:09.074387373 +0000 UTC m=+480.612941996 I0729 13:48:58.559641 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:48:58.559756 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-29 13:48:58.559749706 +0000 UTC m=+530.098304289 I0729 13:48:58.560111 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-29 13:48:58.560107568 +0000 UTC m=+530.098662141 I0729 13:48:58.560492 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:48:58.560539 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-29 13:48:58.560535773 +0000 UTC m=+530.099090346 I0729 13:48:58.560728 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-29 13:48:58.56072509 +0000 UTC m=+530.099279663 I0729 13:48:58.561443 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:48:58.561546 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-29 13:48:58.561541607 +0000 UTC m=+530.100096190 I0729 13:48:58.561701 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-29 13:48:58.561698293 +0000 UTC m=+530.100252876 I0729 13:48:59.132233 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:48:59.132467 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:48:59.132483 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-29 13:48:59.132477867 +0000 UTC m=+530.671032440 I0729 13:48:59.135012 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:48:59.135043 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:48:59.135054 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-29 13:48:59.135051914 +0000 UTC m=+530.673606497 I0729 13:48:59.135527 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:48:59.138212 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-29 13:48:59.138206491 +0000 UTC m=+530.676761084 I0729 13:48:59.785402 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:48:59.929493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-29 13:48:59.929475246 +0000 UTC m=+531.468029829 I0729 13:48:59.930527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-29 13:48:59.930523892 +0000 UTC m=+531.469078465 I0729 13:49:00.107621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-29 13:49:00.107610497 +0000 UTC m=+531.646165090 I0729 13:49:00.127834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-29 13:49:00.127819226 +0000 UTC m=+531.666373839 I0729 13:49:00.372861 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:00.373372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-29 13:49:00.373359365 +0000 UTC m=+531.911913978 I0729 13:49:00.403494 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:49:00.403483252 +0000 UTC m=+531.942037845 I0729 13:49:00.435479 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:49:00.435469423 +0000 UTC m=+531.974024026 I0729 13:49:00.436627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-29 13:49:00.436569351 +0000 UTC m=+531.975123974 I0729 13:49:00.458350 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:00.459009 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:49:00.459001865 +0000 UTC m=+531.997556448 I0729 13:49:00.513149 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:00.726889 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:49:00.726878486 +0000 UTC m=+532.265433079 I0729 13:49:00.747525 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:00.748868 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:00.761671 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:00.862843 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:01.027898 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:15.660327 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:49:15.660409 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls" condition "Issuing" to 2026-07-29 13:49:15.660399034 +0000 UTC m=+547.198953657 I0729 13:49:15.661106 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls" condition "Ready" to 2026-07-29 13:49:15.661097507 +0000 UTC m=+547.199652130 I0729 13:49:15.678355 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:15.678467 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls" condition "Ready" to 2026-07-29 13:49:15.678456515 +0000 UTC m=+547.217011108 I0729 13:49:15.742273 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:15.774355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls-1" condition "Approved" to 2026-07-29 13:49:15.774339602 +0000 UTC m=+547.312894195 I0729 13:49:15.799036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls-1" condition "Ready" to 2026-07-29 13:49:15.79897657 +0000 UTC m=+547.337531153 I0729 13:49:15.843485 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:49:15.843473849 +0000 UTC m=+547.382028432 I0729 13:49:15.862038 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wz2bv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:39.149073 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:49:39.149114 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-29 13:49:39.149104373 +0000 UTC m=+570.687658956 I0729 13:49:39.149354 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-29 13:49:39.149347483 +0000 UTC m=+570.687902066 I0729 13:49:39.160368 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:39.160793 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-29 13:49:39.16076715 +0000 UTC m=+570.699321743 I0729 13:49:39.387505 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:39.423225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-29 13:49:39.423210137 +0000 UTC m=+570.961764720 I0729 13:49:39.444748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-29 13:49:39.444737627 +0000 UTC m=+570.983292210 I0729 13:49:39.477599 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:49:39.47756478 +0000 UTC m=+571.016119373 I0729 13:49:39.493346 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:39.495075 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:49:39.495064328 +0000 UTC m=+571.033618921 I0729 13:49:39.517302 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:49:39.533663 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:53:03.260741 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-29 13:53:03.260709982 +0000 UTC m=+774.799264605 I0729 13:53:03.260780 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:53:03.261032 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-29 13:53:03.260983375 +0000 UTC m=+774.799538008 I0729 13:53:03.277251 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:53:03.277320 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-29 13:53:03.277314321 +0000 UTC m=+774.815868914 I0729 13:53:03.565515 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:53:03.596580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-29 13:53:03.596565872 +0000 UTC m=+775.135120475 I0729 13:53:03.619278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-29 13:53:03.619267044 +0000 UTC m=+775.157821627 I0729 13:53:03.647930 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:53:03.647921577 +0000 UTC m=+775.186476160 I0729 13:53:03.659424 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:53:03.660114 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:53:03.660106051 +0000 UTC m=+775.198660644 I0729 13:53:03.684416 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:53:55.728749 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 13:53:55.728798 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-29 13:53:55.728792051 +0000 UTC m=+827.267346624 I0729 13:53:55.729033 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-29 13:53:55.729028325 +0000 UTC m=+827.267582908 I0729 13:53:55.749484 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:53:55.751712 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-29 13:53:55.751695 +0000 UTC m=+827.290249623 I0729 13:53:56.097207 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:53:56.288846 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:53:56.302481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-29 13:53:56.302470473 +0000 UTC m=+827.841025066 I0729 13:53:56.317533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-29 13:53:56.317522161 +0000 UTC m=+827.856076754 I0729 13:53:56.347352 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:53:56.347341209 +0000 UTC m=+827.885895792 I0729 13:53:56.358912 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:53:56.360653 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 13:53:56.360644802 +0000 UTC m=+827.899199415 I0729 13:53:56.382256 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 13:53:56.385370 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"