I0723 10:27:56.182271       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0723 10:27:56.182342       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0723 10:27:56.182418       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0723 10:27:56.184550       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0723 10:27:56.184855       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0723 10:27:56.184913       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0723 10:27:56.184963       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0723 10:27:56.186768       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0723 10:27:56.201146       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0723 10:27:56.201443       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0723 10:27:56.201535       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0723 10:27:56.209732       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0723 10:27:56.214662       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0723 10:27:56.218027       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0723 10:27:56.220608       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0723 10:27:56.220671       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0723 10:27:56.223215       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0723 10:27:56.226319       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0723 10:27:56.228851       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0723 10:27:56.234680       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0723 10:27:56.238704       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0723 10:27:56.240775       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0723 10:27:56.240835       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0723 10:27:56.243250       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0723 10:27:56.245003       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0723 10:27:56.247450       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0723 10:27:56.247540       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0723 10:27:56.249492       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0723 10:27:56.251320       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0723 10:27:56.253101       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0723 10:27:56.255626       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0723 10:27:56.257012       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0723 10:27:56.258977       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0723 10:27:56.261775       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0723 10:27:56.261813       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0723 10:27:56.262204       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0723 10:27:56.276514       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0723 10:27:56.293942       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0723 10:27:56.307863       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0723 10:27:56.322478       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0723 10:27:56.336518       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0723 10:27:56.349637       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0723 10:27:56.351810       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0723 10:28:10.162103       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-23 10:28:10.162076257 +0000 UTC m=+14.009960042
I0723 10:28:10.903042       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-23 10:28:10.903010624 +0000 UTC m=+14.750894439
I0723 10:28:10.904834       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:28:10.904979       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-23 10:28:10.904969018 +0000 UTC m=+14.752852803
E0723 10:28:10.918464       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0723 10:28:10.918553       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-23 10:28:10.918542838 +0000 UTC m=+14.766426603
E0723 10:28:10.918585       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0723 10:28:10.922593       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:28:10.922772       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:28:10.922806       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-23 10:28:10.922796625 +0000 UTC m=+14.770680390
E0723 10:28:10.934572       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0723 10:28:10.934656       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0723 10:28:10.934697       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0723 10:28:10.934745       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0723 10:28:10.959790       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:28:10.964474       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-64r2q" condition "Approved" to 2026-07-23 10:28:10.964466124 +0000 UTC m=+14.812349879
I0723 10:28:10.975867       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-64r2q" condition "Ready" to 2026-07-23 10:28:10.975857433 +0000 UTC m=+14.823741198
I0723 10:28:10.997985       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:28:10.997965527 +0000 UTC m=+14.845849332
I0723 10:28:11.018440       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:28:11.019978       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:28:11.019967858 +0000 UTC m=+14.867851653
I0723 10:28:11.034888       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:28:11.035200       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:28:11.035189834 +0000 UTC m=+14.883073609
I0723 10:28:15.935199       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:28:15.935185046 +0000 UTC m=+19.783068831
I0723 10:28:39.996965       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:28:39.997226       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-23 10:28:39.997143114 +0000 UTC m=+43.845026909
I0723 10:28:39.997937       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-23 10:28:39.997927352 +0000 UTC m=+43.845811137
I0723 10:28:40.014636       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-23 10:28:40.014622156 +0000 UTC m=+43.862505921
I0723 10:28:40.026095       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:28:40.026249       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:28:40.026294       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-23 10:28:40.026270346 +0000 UTC m=+43.874154111
I0723 10:28:40.206289       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:28:40.215001       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bdwbg" condition "Approved" to 2026-07-23 10:28:40.214992119 +0000 UTC m=+44.062875864
I0723 10:28:40.249877       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bdwbg" condition "Ready" to 2026-07-23 10:28:40.249866049 +0000 UTC m=+44.097749814
I0723 10:28:40.286390       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:28:40.286372796 +0000 UTC m=+44.134256561
I0723 10:28:40.312050       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:33:05.514986       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-20.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:33:05.515044       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-20.nip.io-tls" condition "Issuing" to 2026-07-23 10:33:05.515010535 +0000 UTC m=+309.362894300
I0723 10:33:05.515391       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-20.nip.io-tls" condition "Ready" to 2026-07-23 10:33:05.515385872 +0000 UTC m=+309.363269637
I0723 10:33:05.532339       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-20.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-20.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:33:05.532621       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-20.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:33:05.532653       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-20.nip.io-tls" condition "Issuing" to 2026-07-23 10:33:05.532644786 +0000 UTC m=+309.380528551
I0723 10:33:05.816568       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-20.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-20.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:33:05.823980       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-20.nip.io-tls-q6n49" condition "Approved" to 2026-07-23 10:33:05.823962965 +0000 UTC m=+309.671846740
I0723 10:33:05.851258       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-20.nip.io-tls-q6n49" condition "Ready" to 2026-07-23 10:33:05.851246929 +0000 UTC m=+309.699130694
I0723 10:33:05.882251       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-20.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:33:05.882238351 +0000 UTC m=+309.730122116
I0723 10:33:05.912038       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-20.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-20.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:34:16.453988       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:34:16.454055       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-23 10:34:16.454049408 +0000 UTC m=+380.301933163
I0723 10:34:16.454046       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-23 10:34:16.454009048 +0000 UTC m=+380.301892823
E0723 10:34:16.466807       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0723 10:34:16.466848       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-23 10:34:16.466839536 +0000 UTC m=+380.314723301
E0723 10:34:16.466897       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0723 10:34:16.469554       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:34:16.469631       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-23 10:34:16.469625255 +0000 UTC m=+380.317509020
E0723 10:34:16.484086       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0723 10:34:16.484395       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0723 10:34:16.484512       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0723 10:34:16.484681       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0723 10:34:16.490613       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:34:16.508978       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kgzpn" condition "Approved" to 2026-07-23 10:34:16.50896452 +0000 UTC m=+380.356848285
I0723 10:34:16.520331       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kgzpn" condition "Ready" to 2026-07-23 10:34:16.520320408 +0000 UTC m=+380.368204163
I0723 10:34:16.542870       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:34:16.54285972 +0000 UTC m=+380.390743485
I0723 10:34:16.561239       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:34:21.485535       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:34:21.485515527 +0000 UTC m=+385.333399322
I0723 10:35:03.187586       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:35:03.187652       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-23 10:35:03.187639587 +0000 UTC m=+427.035523342
I0723 10:35:03.187992       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-23 10:35:03.187980724 +0000 UTC m=+427.035864469
I0723 10:35:03.188239       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:35:03.188267       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-23 10:35:03.188262451 +0000 UTC m=+427.036146226
I0723 10:35:03.188298       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-23 10:35:03.188293811 +0000 UTC m=+427.036177556
I0723 10:35:03.192945       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:35:03.198224       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-23 10:35:03.198206168 +0000 UTC m=+427.046089923
I0723 10:35:03.193310       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-23 10:35:03.193303496 +0000 UTC m=+427.041187251
I0723 10:35:03.234404       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:03.234464       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-23 10:35:03.234458676 +0000 UTC m=+427.082342431
I0723 10:35:03.249239       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:03.249827       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:35:03.254111       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-23 10:35:03.254091628 +0000 UTC m=+427.101975463
I0723 10:35:03.286814       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:03.286884       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-23 10:35:03.286878383 +0000 UTC m=+427.134762128
I0723 10:35:03.542398       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:03.581388       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mxjc4" condition "Approved" to 2026-07-23 10:35:03.581380096 +0000 UTC m=+427.429263851
I0723 10:35:03.597095       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mxjc4" condition "Ready" to 2026-07-23 10:35:03.597086745 +0000 UTC m=+427.444970500
I0723 10:35:03.615051       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:03.630647       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:35:03.630639417 +0000 UTC m=+427.478523172
E0723 10:35:03.662576       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-mnhxl\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls"
I0723 10:35:03.662817       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-49z6s" condition "Approved" to 2026-07-23 10:35:03.66280877 +0000 UTC m=+427.510692525
I0723 10:35:03.659106       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:03.663591       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:35:03.663585356 +0000 UTC m=+427.511469111
I0723 10:35:03.669072       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:03.688070       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-49z6s" condition "Ready" to 2026-07-23 10:35:03.688058828 +0000 UTC m=+427.535942583
I0723 10:35:03.695485       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:03.766122       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:35:03.766112241 +0000 UTC m=+427.613995996
I0723 10:35:03.866126       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:03.866575       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:35:03.866565813 +0000 UTC m=+427.714449598
I0723 10:35:04.118744       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:04.163736       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:04.473467       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xh6dg" condition "Approved" to 2026-07-23 10:35:04.473450931 +0000 UTC m=+428.321334706
I0723 10:35:04.576078       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xh6dg" condition "Ready" to 2026-07-23 10:35:04.576065128 +0000 UTC m=+428.423948903
I0723 10:35:05.014673       1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-xh6dg" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-4xjrz" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1"
I0723 10:35:05.219435       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-85swf" condition "Approved" to 2026-07-23 10:35:05.21942098 +0000 UTC m=+429.067304745
I0723 10:35:05.329296       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-85swf" condition "Ready" to 2026-07-23 10:35:05.329279468 +0000 UTC m=+429.177163273
I0723 10:35:05.767288       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:35:05.767274772 +0000 UTC m=+429.615158537
I0723 10:35:05.866806       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:13.565733       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:35:13.565766       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls" condition "Issuing" to 2026-07-23 10:35:13.565757553 +0000 UTC m=+437.413641308
I0723 10:35:13.565798       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls" condition "Ready" to 2026-07-23 10:35:13.565792134 +0000 UTC m=+437.413675889
I0723 10:35:13.577627       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:13.577687       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:35:13.577748       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls" condition "Issuing" to 2026-07-23 10:35:13.577742414 +0000 UTC m=+437.425626179
I0723 10:35:13.817853       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8pgbn-zkbhr" condition "Approved" to 2026-07-23 10:35:13.817839626 +0000 UTC m=+437.665723381
I0723 10:35:13.875453       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8pgbn-zkbhr" condition "Ready" to 2026-07-23 10:35:13.875438711 +0000 UTC m=+437.723322486
I0723 10:35:13.933406       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:35:13.933391793 +0000 UTC m=+437.781275548
I0723 10:35:13.961300       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:14.095110       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8pgbn-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:31.316656       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:35:31.316694       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-23 10:35:31.316681965 +0000 UTC m=+455.164565730
I0723 10:35:31.317352       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-23 10:35:31.317344869 +0000 UTC m=+455.165228634
I0723 10:35:31.339907       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:31.339989       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:35:31.340072       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-23 10:35:31.340064654 +0000 UTC m=+455.187948429
I0723 10:35:31.534573       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:35:31.590991       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jzghs" condition "Approved" to 2026-07-23 10:35:31.59096895 +0000 UTC m=+455.438852745
I0723 10:35:31.616177       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jzghs" condition "Ready" to 2026-07-23 10:35:31.616166346 +0000 UTC m=+455.464050111
I0723 10:35:31.651941       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:35:31.651929425 +0000 UTC m=+455.499813170
I0723 10:35:31.679095       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:38:51.512608       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:38:51.512840       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-23 10:38:51.512818431 +0000 UTC m=+655.360702206
I0723 10:38:51.513118       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-23 10:38:51.513112399 +0000 UTC m=+655.360996164
I0723 10:38:51.530610       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:38:51.530869       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-23 10:38:51.530860809 +0000 UTC m=+655.378744584
I0723 10:38:51.816336       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:38:51.853934       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nx6s7" condition "Approved" to 2026-07-23 10:38:51.853917265 +0000 UTC m=+655.701801020
I0723 10:38:51.879318       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nx6s7" condition "Ready" to 2026-07-23 10:38:51.879302848 +0000 UTC m=+655.727186623
I0723 10:38:51.910006       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:38:51.909990837 +0000 UTC m=+655.757874592
I0723 10:38:51.930739       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:38:51.939985       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:38:51.940419       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:38:51.940410739 +0000 UTC m=+655.788294504
I0723 10:38:51.949504       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:38:51.949803       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:38:51.949796274 +0000 UTC m=+655.797680029
I0723 10:38:51.951263       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:39:33.716963       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-23 10:39:33.716949058 +0000 UTC m=+697.564832833
I0723 10:39:33.717015       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:39:33.717113       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-23 10:39:33.717099153 +0000 UTC m=+697.564982948
I0723 10:39:33.750765       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:39:33.750895       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0723 10:39:33.750918       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-23 10:39:33.750908738 +0000 UTC m=+697.598792533
I0723 10:39:34.115291       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rrbv8" condition "Approved" to 2026-07-23 10:39:34.115279987 +0000 UTC m=+697.963163742
I0723 10:39:34.138150       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rrbv8" condition "Ready" to 2026-07-23 10:39:34.138089521 +0000 UTC m=+697.985973296
I0723 10:39:34.173019       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-23 10:39:34.173001626 +0000 UTC m=+698.020885401
I0723 10:39:34.197557       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0723 10:39:34.262208       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"