I0708 09:46:25.980123 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0708 09:46:25.980282 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0708 09:46:25.980374 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0708 09:46:25.985237 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0708 09:46:25.985784 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0708 09:46:25.985866 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0708 09:46:25.985844 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0708 09:46:25.989197 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0708 09:46:26.005056 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0708 09:46:26.008834 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0708 09:46:26.014059 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0708 09:46:26.016767 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0708 09:46:26.019449 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0708 09:46:26.022353 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0708 09:46:26.022381 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0708 09:46:26.022459 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0708 09:46:26.024507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0708 09:46:26.026295 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0708 09:46:26.028234 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0708 09:46:26.028269 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0708 09:46:26.034783 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0708 09:46:26.038647 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0708 09:46:26.040360 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0708 09:46:26.042125 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0708 09:46:26.042142 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0708 09:46:26.042156 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0708 09:46:26.044147 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0708 09:46:26.045802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0708 09:46:26.047839 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0708 09:46:26.049546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0708 09:46:26.053629 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0708 09:46:26.055267 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0708 09:46:26.055472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0708 09:46:26.058231 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:46:26.058503 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:46:26.059148 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:46:26.079842 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:46:26.097740 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:46:26.113092 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:46:26.131402 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:46:26.141728 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:46:26.144730 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:46:26.156223 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:46:40.817238 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-08 09:46:40.817216496 +0000 UTC m=+14.871548462 I0708 09:46:41.563402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:46:41.563448 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-08 09:46:41.563440696 +0000 UTC m=+15.617772632 I0708 09:46:41.563526 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 09:46:41.563502727 +0000 UTC m=+15.617834693 E0708 09:46:41.578916 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 09:46:41.578999 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-08 09:46:41.578990324 +0000 UTC m=+15.633322270 E0708 09:46:41.579024 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 09:46:41.585096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:46:41.585182 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:46:41.585209 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-08 09:46:41.585201516 +0000 UTC m=+15.639533452 E0708 09:46:41.595833 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0708 09:46:41.596246 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 09:46:41.596309 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 09:46:41.596360 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0708 09:46:41.629585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wdj6v" condition "Approved" to 2026-07-08 09:46:41.629569591 +0000 UTC m=+15.683901527 I0708 09:46:41.642492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wdj6v" condition "Ready" to 2026-07-08 09:46:41.642479003 +0000 UTC m=+15.696810939 I0708 09:46:41.663273 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:46:41.663261845 +0000 UTC m=+15.717593771 I0708 09:46:41.687302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:46:46.596427 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:46:46.596413718 +0000 UTC m=+20.650745684 I0708 09:47:10.819898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:47:10.819959 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 09:47:10.819950891 +0000 UTC m=+44.874282807 I0708 09:47:10.822548 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-08 09:47:10.822510142 +0000 UTC m=+44.876842068 I0708 09:47:10.835227 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-08 09:47:10.835214273 +0000 UTC m=+44.889546199 I0708 09:47:10.852762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:47:10.852860 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-08 09:47:10.852848373 +0000 UTC m=+44.907180309 I0708 09:47:11.164607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:47:11.197479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rgsr8" condition "Approved" to 2026-07-08 09:47:11.197461239 +0000 UTC m=+45.251793175 I0708 09:47:11.228413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rgsr8" condition "Ready" to 2026-07-08 09:47:11.228394428 +0000 UTC m=+45.282726364 I0708 09:47:11.258638 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:47:11.258618666 +0000 UTC m=+45.312950602 I0708 09:47:11.283800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:51:54.753717 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-27.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:51:54.753775 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Ready" to 2026-07-08 09:51:54.753760546 +0000 UTC m=+328.808092512 I0708 09:51:54.753802 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Issuing" to 2026-07-08 09:51:54.753796347 +0000 UTC m=+328.808128303 I0708 09:51:54.813757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:51:54.813842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-27.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:51:54.813863 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Issuing" to 2026-07-08 09:51:54.813857822 +0000 UTC m=+328.868189748 I0708 09:51:55.028667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-27.nip.io-tls-2qhv5" condition "Approved" to 2026-07-08 09:51:55.028650734 +0000 UTC m=+329.082982690 I0708 09:51:55.066159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-27.nip.io-tls-2qhv5" condition "Ready" to 2026-07-08 09:51:55.066148529 +0000 UTC m=+329.120480465 I0708 09:51:55.095649 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:51:55.095632219 +0000 UTC m=+329.149964185 I0708 09:51:55.127382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:51:55.128843 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:51:55.127766384 +0000 UTC m=+329.182098310 I0708 09:51:55.131624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:51:55.143504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:51:55.143855 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-27.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:51:55.143847557 +0000 UTC m=+329.198179483 I0708 09:53:04.316242 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:53:04.316282 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 09:53:04.316271983 +0000 UTC m=+398.370603949 I0708 09:53:04.316351 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-08 09:53:04.316330384 +0000 UTC m=+398.370662340 E0708 09:53:04.333026 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 09:53:04.333120 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-08 09:53:04.333111083 +0000 UTC m=+398.387443019 E0708 09:53:04.333176 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 09:53:04.337477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:04.337524 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-08 09:53:04.337518584 +0000 UTC m=+398.391850520 E0708 09:53:04.342850 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0708 09:53:04.344080 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 09:53:04.344119 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 09:53:04.344185 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0708 09:53:04.349617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:04.349791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:04.349859 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-08 09:53:04.349829301 +0000 UTC m=+398.404161227 I0708 09:53:04.354135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-g5nh5" condition "Approved" to 2026-07-08 09:53:04.354114119 +0000 UTC m=+398.408446105 I0708 09:53:04.370997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-g5nh5" condition "Ready" to 2026-07-08 09:53:04.37098904 +0000 UTC m=+398.425320976 I0708 09:53:04.392666 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:53:04.392654229 +0000 UTC m=+398.446986165 I0708 09:53:04.412019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:09.344182 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:53:09.344172318 +0000 UTC m=+403.398504244 I0708 09:53:50.753283 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-08 09:53:50.753255555 +0000 UTC m=+444.807587501 I0708 09:53:50.753301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:53:50.754185 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 09:53:50.754180141 +0000 UTC m=+444.808512077 I0708 09:53:50.765269 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 09:53:50.765253945 +0000 UTC m=+444.819585871 I0708 09:53:50.765574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:53:50.765623 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-08 09:53:50.765615981 +0000 UTC m=+444.819947917 I0708 09:53:50.777410 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:53:50.777794 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-08 09:53:50.777787344 +0000 UTC m=+444.832119290 I0708 09:53:50.778561 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 09:53:50.778556067 +0000 UTC m=+444.832888003 I0708 09:53:50.810937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:50.811002 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 09:53:50.810995114 +0000 UTC m=+444.865327040 I0708 09:53:50.811893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:50.812097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:53:50.812145 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 09:53:50.812138853 +0000 UTC m=+444.866470789 I0708 09:53:50.833430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:50.835289 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 09:53:50.835278587 +0000 UTC m=+444.889610523 I0708 09:53:51.049529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:51.060006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:51.092171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cch5f" condition "Approved" to 2026-07-08 09:53:51.092160761 +0000 UTC m=+445.146492697 I0708 09:53:51.110070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7gddc" condition "Approved" to 2026-07-08 09:53:51.110061873 +0000 UTC m=+445.164393799 I0708 09:53:51.128384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cch5f" condition "Ready" to 2026-07-08 09:53:51.128375582 +0000 UTC m=+445.182707508 I0708 09:53:51.150447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7gddc" condition "Ready" to 2026-07-08 09:53:51.150436207 +0000 UTC m=+445.204768133 I0708 09:53:51.192039 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:53:51.192028573 +0000 UTC m=+445.246360499 I0708 09:53:51.217811 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:53:51.217800922 +0000 UTC m=+445.272132838 I0708 09:53:51.287001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:51.287434 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:53:51.287425786 +0000 UTC m=+445.341757722 I0708 09:53:51.305709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:51.318300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:51.353744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:51.746888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:51.806280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tcbdm" condition "Approved" to 2026-07-08 09:53:51.806268245 +0000 UTC m=+445.860600171 I0708 09:53:52.162331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tcbdm" condition "Ready" to 2026-07-08 09:53:52.162319762 +0000 UTC m=+446.216651688 I0708 09:53:52.352747 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:53:52.3527355 +0000 UTC m=+446.407067436 I0708 09:53:52.446993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:52.447373 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:53:52.447366989 +0000 UTC m=+446.501698925 I0708 09:53:52.648783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:00.045302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qndl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:54:00.045336 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qndl-tls" condition "Issuing" to 2026-07-08 09:54:00.045328134 +0000 UTC m=+454.099660070 I0708 09:54:00.046032 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qndl-tls" condition "Ready" to 2026-07-08 09:54:00.046026726 +0000 UTC m=+454.100358662 I0708 09:54:00.062988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qndl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qndl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:00.063072 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qndl-tls" condition "Ready" to 2026-07-08 09:54:00.063064891 +0000 UTC m=+454.117396827 I0708 09:54:00.262585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qndl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qndl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:00.313025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8qndl-ttvwd" condition "Approved" to 2026-07-08 09:54:00.313012633 +0000 UTC m=+454.367344559 I0708 09:54:00.335712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8qndl-ttvwd" condition "Ready" to 2026-07-08 09:54:00.335700935 +0000 UTC m=+454.390032861 I0708 09:54:00.363845 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qndl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:54:00.363834122 +0000 UTC m=+454.418166098 I0708 09:54:00.386436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qndl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qndl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:00.386961 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qndl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:54:00.386954061 +0000 UTC m=+454.441286007 I0708 09:54:00.410850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qndl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qndl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:15.581519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:54:15.582131 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-08 09:54:15.582123711 +0000 UTC m=+469.636455647 I0708 09:54:15.581518 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 09:54:15.581509021 +0000 UTC m=+469.635840947 I0708 09:54:15.595523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:15.595607 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 09:54:15.595596541 +0000 UTC m=+469.649928497 I0708 09:54:15.816314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:15.854026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jlmgr" condition "Approved" to 2026-07-08 09:54:15.854012731 +0000 UTC m=+469.908344667 I0708 09:54:15.870666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jlmgr" condition "Ready" to 2026-07-08 09:54:15.870654345 +0000 UTC m=+469.924986271 I0708 09:54:15.898734 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:54:15.898723674 +0000 UTC m=+469.953055610 I0708 09:54:15.930860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:59:12.730780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:59:12.730858 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 09:59:12.730846604 +0000 UTC m=+766.785178560 I0708 09:59:12.731359 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-08 09:59:12.731347012 +0000 UTC m=+766.785678948 I0708 09:59:12.750735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:59:12.750831 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:59:12.750856 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 09:59:12.750849862 +0000 UTC m=+766.805181788 I0708 09:59:12.949362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tm5sv" condition "Approved" to 2026-07-08 09:59:12.949353759 +0000 UTC m=+767.003685685 I0708 09:59:13.153257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tm5sv" condition "Ready" to 2026-07-08 09:59:13.153247421 +0000 UTC m=+767.207579367 I0708 09:59:13.376896 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:59:13.376882348 +0000 UTC m=+767.431214284 I0708 09:59:13.592780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:59:13.645305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:59:56.953097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:59:56.953134 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-08 09:59:56.953125413 +0000 UTC m=+811.007457349 I0708 09:59:56.953618 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-08 09:59:56.953612359 +0000 UTC m=+811.007944295 I0708 09:59:56.977582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:59:56.977817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:59:56.977878 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-08 09:59:56.977838441 +0000 UTC m=+811.032170397 I0708 09:59:57.210676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:59:57.221175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qq5rq" condition "Approved" to 2026-07-08 09:59:57.22116502 +0000 UTC m=+811.275496946 I0708 09:59:57.244248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qq5rq" condition "Ready" to 2026-07-08 09:59:57.244239623 +0000 UTC m=+811.298571549 I0708 09:59:57.272374 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:59:57.272363448 +0000 UTC m=+811.326695394 I0708 09:59:57.300251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:59:57.300618 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:59:57.300612056 +0000 UTC m=+811.354943982 I0708 09:59:57.313015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:59:57.320051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"