I0724 10:01:44.218997 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0724 10:01:44.219130 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0724 10:01:44.219205 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0724 10:01:44.224766 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0724 10:01:44.225259 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0724 10:01:44.225344 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0724 10:01:44.225378 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0724 10:01:44.228065 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0724 10:01:44.243777 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0724 10:01:44.248220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0724 10:01:44.253046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0724 10:01:44.258320 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0724 10:01:44.261355 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0724 10:01:44.263844 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0724 10:01:44.265717 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0724 10:01:44.268025 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0724 10:01:44.268129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0724 10:01:44.269974 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0724 10:01:44.274164 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0724 10:01:44.278695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0724 10:01:44.281461 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0724 10:01:44.281554 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0724 10:01:44.284119 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0724 10:01:44.284191 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0724 10:01:44.286294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0724 10:01:44.288593 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0724 10:01:44.288612 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0724 10:01:44.288689 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0724 10:01:44.290987 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0724 10:01:44.293102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0724 10:01:44.295388 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0724 10:01:44.298532 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0724 10:01:44.299264 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0724 10:01:44.302914 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:01:44.304496 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:01:44.304558 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:01:44.305127 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:01:44.321727 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:01:44.333822 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:01:44.353895 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:01:44.366839 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:01:44.384271 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:01:44.402721 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:01:55.179618 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-24 10:01:55.179585307 +0000 UTC m=+10.990869779 I0724 10:01:55.986711 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-24 10:01:55.986694004 +0000 UTC m=+11.797978486 I0724 10:01:55.987581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:01:55.987728 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 10:01:55.987710766 +0000 UTC m=+11.798995278 E0724 10:01:56.049474 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:01:56.049598 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-24 10:01:56.049584014 +0000 UTC m=+11.860868536 E0724 10:01:56.049640 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:01:56.052821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:01:56.052967 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:01:56.052995 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 10:01:56.052987398 +0000 UTC m=+11.864271890 E0724 10:01:56.123703 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0724 10:01:56.125019 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:01:56.125088 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:01:56.125145 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0724 10:01:56.208352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:01:56.208723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-85wmg" condition "Approved" to 2026-07-24 10:01:56.208704302 +0000 UTC m=+12.019988784 I0724 10:01:56.255547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-85wmg" condition "Ready" to 2026-07-24 10:01:56.255528756 +0000 UTC m=+12.066813248 I0724 10:01:56.284508 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:01:56.284491839 +0000 UTC m=+12.095776331 I0724 10:01:56.302708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:01.124193 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:02:01.124156943 +0000 UTC m=+16.935441455 I0724 10:02:25.935688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:02:25.936039 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 10:02:25.936027382 +0000 UTC m=+41.747311874 I0724 10:02:25.935700 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-24 10:02:25.935664495 +0000 UTC m=+41.746948987 I0724 10:02:25.952173 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-24 10:02:25.952161051 +0000 UTC m=+41.763445543 I0724 10:02:25.975445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:25.975511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:02:25.975527 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 10:02:25.975522316 +0000 UTC m=+41.786806798 I0724 10:02:26.204991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:26.211672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zb4tj" condition "Approved" to 2026-07-24 10:02:26.211660983 +0000 UTC m=+42.022945495 I0724 10:02:26.245430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zb4tj" condition "Ready" to 2026-07-24 10:02:26.245417931 +0000 UTC m=+42.056702423 I0724 10:02:26.283867 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:02:26.283854082 +0000 UTC m=+42.095138574 I0724 10:02:26.305451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:26.368862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:06:42.837794 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-161.nip.io-tls" condition "Ready" to 2026-07-24 10:06:42.837759258 +0000 UTC m=+298.649043740 I0724 10:06:42.838271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-161.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:06:42.838328 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-161.nip.io-tls" condition "Issuing" to 2026-07-24 10:06:42.838316127 +0000 UTC m=+298.649600619 I0724 10:06:42.856856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:06:42.856950 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-161.nip.io-tls" condition "Ready" to 2026-07-24 10:06:42.856941148 +0000 UTC m=+298.668225640 I0724 10:06:43.357639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:06:43.392501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-161.nip.io-tls-65jlz" condition "Approved" to 2026-07-24 10:06:43.392488914 +0000 UTC m=+299.203773406 I0724 10:06:43.419529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-161.nip.io-tls-65jlz" condition "Ready" to 2026-07-24 10:06:43.41951827 +0000 UTC m=+299.230802762 I0724 10:06:43.449241 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-161.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:06:43.449222191 +0000 UTC m=+299.260506683 I0724 10:06:43.481569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:06:43.481915 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-161.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:06:43.481907484 +0000 UTC m=+299.293191976 I0724 10:06:43.497488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:06:43.497890 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-161.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:06:43.497882609 +0000 UTC m=+299.309167101 I0724 10:06:43.505428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:07:47.952669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-24 10:07:47.95263855 +0000 UTC m=+363.763923042 I0724 10:07:47.952695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:07:47.952721 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-24 10:07:47.952715932 +0000 UTC m=+363.764000424 E0724 10:07:47.964406 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:07:47.964456 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-24 10:07:47.964447567 +0000 UTC m=+363.775732049 E0724 10:07:47.964506 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:07:47.965265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:07:47.965323 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-24 10:07:47.965317352 +0000 UTC m=+363.776601844 E0724 10:07:47.978635 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0724 10:07:47.979242 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:07:47.979333 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:07:47.979419 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0724 10:07:47.985140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:07:48.002701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fqj99" condition "Approved" to 2026-07-24 10:07:48.002691337 +0000 UTC m=+363.813975819 I0724 10:07:48.017913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fqj99" condition "Ready" to 2026-07-24 10:07:48.017897116 +0000 UTC m=+363.829181638 I0724 10:07:48.038679 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:07:48.038666116 +0000 UTC m=+363.849950628 I0724 10:07:48.055915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:07:48.057293 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:07:48.057285947 +0000 UTC m=+363.868570439 I0724 10:07:48.071442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:07:52.980014 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:07:52.979988961 +0000 UTC m=+368.791273483 I0724 10:08:34.647389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:08:34.647423 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-24 10:08:34.64741752 +0000 UTC m=+410.458701992 I0724 10:08:34.647663 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-24 10:08:34.647644854 +0000 UTC m=+410.458929346 I0724 10:08:34.693226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:08:34.693253 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-24 10:08:34.693248042 +0000 UTC m=+410.504532524 I0724 10:08:34.693385 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-24 10:08:34.693369114 +0000 UTC m=+410.504653606 I0724 10:08:34.693683 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:08:34.693697 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-24 10:08:34.693694861 +0000 UTC m=+410.504979343 I0724 10:08:34.693907 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-24 10:08:34.693902695 +0000 UTC m=+410.505187177 I0724 10:08:34.704029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:34.704166 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-24 10:08:34.704158458 +0000 UTC m=+410.515442950 I0724 10:08:34.746867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:34.746927 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-24 10:08:34.746921094 +0000 UTC m=+410.558205576 I0724 10:08:34.747211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:34.747575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:08:34.747603 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-24 10:08:34.747599246 +0000 UTC m=+410.558883728 I0724 10:08:34.856553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:34.887909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-24nsb" condition "Approved" to 2026-07-24 10:08:34.887874227 +0000 UTC m=+410.699158729 I0724 10:08:34.907422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-24nsb" condition "Ready" to 2026-07-24 10:08:34.907410925 +0000 UTC m=+410.718695417 I0724 10:08:34.957901 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:34.957889025 +0000 UTC m=+410.769173507 I0724 10:08:34.995244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:34.995319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:35.024716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v5bl8" condition "Approved" to 2026-07-24 10:08:35.024696104 +0000 UTC m=+410.835980576 I0724 10:08:35.065141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v5bl8" condition "Ready" to 2026-07-24 10:08:35.065131656 +0000 UTC m=+410.876416138 I0724 10:08:35.104624 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:35.104608009 +0000 UTC m=+410.915892501 I0724 10:08:35.137277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:35.184022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:35.443742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5dx2c" condition "Approved" to 2026-07-24 10:08:35.443716007 +0000 UTC m=+411.255000499 I0724 10:08:35.896133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5dx2c" condition "Ready" to 2026-07-24 10:08:35.89612397 +0000 UTC m=+411.707408472 I0724 10:08:36.138327 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:36.138309613 +0000 UTC m=+411.949594135 I0724 10:08:36.235355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:36.235689 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:36.235683219 +0000 UTC m=+412.046967711 I0724 10:08:36.436118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:43.169395 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-phctn-tls" condition "Ready" to 2026-07-24 10:08:43.169342504 +0000 UTC m=+418.980626986 I0724 10:08:43.169955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phctn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:08:43.169978 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-phctn-tls" condition "Issuing" to 2026-07-24 10:08:43.169974237 +0000 UTC m=+418.981258719 I0724 10:08:43.189231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phctn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-phctn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:43.189278 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-phctn-tls" condition "Ready" to 2026-07-24 10:08:43.189272561 +0000 UTC m=+419.000557043 I0724 10:08:43.460355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phctn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-phctn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:43.540494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-phctn-gfndw" condition "Approved" to 2026-07-24 10:08:43.540465502 +0000 UTC m=+419.351749984 I0724 10:08:43.584396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-phctn-gfndw" condition "Ready" to 2026-07-24 10:08:43.584386152 +0000 UTC m=+419.395670624 I0724 10:08:43.621274 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-phctn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:43.62125494 +0000 UTC m=+419.432539432 I0724 10:08:43.641044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phctn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-phctn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:43.641475 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-phctn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:43.641466361 +0000 UTC m=+419.452750843 I0724 10:08:43.668679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-phctn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-phctn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:57.107511 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-24 10:08:57.107494831 +0000 UTC m=+432.918779323 I0724 10:08:57.108362 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:08:57.108587 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-24 10:08:57.108550581 +0000 UTC m=+432.919835073 I0724 10:08:57.125798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:57.125966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:08:57.126009 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-24 10:08:57.125995753 +0000 UTC m=+432.937280275 I0724 10:08:57.296730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:57.313106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kc6lg" condition "Approved" to 2026-07-24 10:08:57.313082511 +0000 UTC m=+433.124367023 I0724 10:08:57.338606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kc6lg" condition "Ready" to 2026-07-24 10:08:57.338591436 +0000 UTC m=+433.149875908 I0724 10:08:57.374085 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:57.374067261 +0000 UTC m=+433.185351783 I0724 10:08:57.395416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:57.395963 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:57.395941327 +0000 UTC m=+433.207225819 I0724 10:08:57.415939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:57.416152 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:57.416144621 +0000 UTC m=+433.227429103 I0724 10:12:12.981138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:12:12.981227 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-24 10:12:12.981215163 +0000 UTC m=+628.792499685 I0724 10:12:12.982463 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-24 10:12:12.981836005 +0000 UTC m=+628.793120527 I0724 10:12:13.002020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:13.002128 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-24 10:12:13.002121837 +0000 UTC m=+628.813406329 I0724 10:12:13.076199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:13.108270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-q5655" condition "Approved" to 2026-07-24 10:12:13.108260076 +0000 UTC m=+628.919544558 I0724 10:12:13.134987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-q5655" condition "Ready" to 2026-07-24 10:12:13.134974534 +0000 UTC m=+628.946259016 I0724 10:12:13.169475 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:12:13.169458341 +0000 UTC m=+628.980742853 I0724 10:12:13.196644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:13.250087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:52.326950 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-24 10:12:52.326926271 +0000 UTC m=+668.138210763 I0724 10:12:52.327938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:12:52.327988 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-24 10:12:52.32797736 +0000 UTC m=+668.139261852 I0724 10:12:52.349427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:52.349507 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-24 10:12:52.34949739 +0000 UTC m=+668.160781882 I0724 10:12:52.561114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:52.600740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mgk7x" condition "Approved" to 2026-07-24 10:12:52.600715639 +0000 UTC m=+668.412000131 I0724 10:12:52.622729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mgk7x" condition "Ready" to 2026-07-24 10:12:52.622714618 +0000 UTC m=+668.433999110 I0724 10:12:52.658715 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:12:52.658696062 +0000 UTC m=+668.469980584 I0724 10:12:52.681030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:52.754892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"