I0708 06:17:14.093962 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0708 06:17:14.094051 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0708 06:17:14.094109 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0708 06:17:14.097482 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0708 06:17:14.097832 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0708 06:17:14.097877 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0708 06:17:14.097932 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0708 06:17:14.099735 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0708 06:17:14.112464 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0708 06:17:14.116521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0708 06:17:14.118238 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0708 06:17:14.123478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0708 06:17:14.127136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0708 06:17:14.129822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0708 06:17:14.132471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0708 06:17:14.134291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0708 06:17:14.136171 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0708 06:17:14.136401 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0708 06:17:14.138235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0708 06:17:14.143156 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0708 06:17:14.148040 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0708 06:17:14.148109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0708 06:17:14.151201 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0708 06:17:14.153759 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0708 06:17:14.156382 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0708 06:17:14.156433 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0708 06:17:14.156458 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0708 06:17:14.156523 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0708 06:17:14.158517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0708 06:17:14.160382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0708 06:17:14.162601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0708 06:17:14.164700 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0708 06:17:14.164774 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0708 06:17:14.168263 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 06:17:14.168906 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 06:17:14.170260 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 06:17:14.190300 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 06:17:14.202376 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 06:17:14.219611 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 06:17:14.238472 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 06:17:14.252228 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 06:17:14.253923 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 06:17:14.271422 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 06:17:25.423047 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-08 06:17:25.423027912 +0000 UTC m=+11.363342595 I0708 06:17:26.124259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:17:26.124292 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-08 06:17:26.124285209 +0000 UTC m=+12.064599862 I0708 06:17:26.124407 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 06:17:26.124388591 +0000 UTC m=+12.064703244 E0708 06:17:26.136743 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 06:17:26.136953 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-08 06:17:26.136943701 +0000 UTC m=+12.077258354 E0708 06:17:26.137026 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 06:17:26.140852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:17:26.140909 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 06:17:26.140901798 +0000 UTC m=+12.081216451 E0708 06:17:26.150277 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0708 06:17:26.150965 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 06:17:26.150998 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 06:17:26.151049 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0708 06:17:26.155657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:17:26.155725 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 06:17:26.155718107 +0000 UTC m=+12.096032750 I0708 06:17:26.162975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:17:26.163615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xdll6" condition "Approved" to 2026-07-08 06:17:26.16359756 +0000 UTC m=+12.103912213 I0708 06:17:26.171769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xdll6" condition "Ready" to 2026-07-08 06:17:26.171759977 +0000 UTC m=+12.112074610 I0708 06:17:26.191995 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:17:26.191983647 +0000 UTC m=+12.132298300 I0708 06:17:26.212909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:17:31.151210 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:17:31.151195272 +0000 UTC m=+17.091509945 I0708 06:17:52.573387 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-08 06:17:52.573354252 +0000 UTC m=+38.513668905 I0708 06:17:52.573866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:17:52.574113 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 06:17:52.574105494 +0000 UTC m=+38.514420147 I0708 06:17:52.588941 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-08 06:17:52.588932103 +0000 UTC m=+38.529246746 I0708 06:17:52.599121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:17:52.599198 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-08 06:17:52.599192068 +0000 UTC m=+38.539506721 I0708 06:17:52.767854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:17:52.803129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fm95c" condition "Approved" to 2026-07-08 06:17:52.803118841 +0000 UTC m=+38.743433494 I0708 06:17:52.839404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fm95c" condition "Ready" to 2026-07-08 06:17:52.839396073 +0000 UTC m=+38.779710716 I0708 06:17:52.874851 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:17:52.874837364 +0000 UTC m=+38.815152017 I0708 06:17:52.900285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:17:52.900678 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:17:52.900671939 +0000 UTC m=+38.840986582 I0708 06:17:52.925943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:17:52.926181 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:17:52.92617288 +0000 UTC m=+38.866487533 I0708 06:17:52.931064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:22:13.505962 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-204.nip.io-tls" condition "Ready" to 2026-07-08 06:22:13.505946719 +0000 UTC m=+299.446261372 I0708 06:22:13.506470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-204.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:22:13.506514 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-204.nip.io-tls" condition "Issuing" to 2026-07-08 06:22:13.506506048 +0000 UTC m=+299.446820681 I0708 06:22:13.525657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:22:13.525783 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-204.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:22:13.525821 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-204.nip.io-tls" condition "Issuing" to 2026-07-08 06:22:13.525809535 +0000 UTC m=+299.466124208 I0708 06:22:13.804234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:22:13.815957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-204.nip.io-tls-frls2" condition "Approved" to 2026-07-08 06:22:13.81594248 +0000 UTC m=+299.756257153 I0708 06:22:13.854033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-204.nip.io-tls-frls2" condition "Ready" to 2026-07-08 06:22:13.854014515 +0000 UTC m=+299.794329198 I0708 06:22:13.887089 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-204.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:22:13.887075263 +0000 UTC m=+299.827389916 I0708 06:22:13.911951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:22:13.968564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:23:18.832698 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-08 06:23:18.83267516 +0000 UTC m=+364.772989803 I0708 06:23:18.832865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:23:18.832923 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 06:23:18.832909353 +0000 UTC m=+364.773224036 E0708 06:23:18.844763 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 06:23:18.844810 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-08 06:23:18.84480196 +0000 UTC m=+364.785116613 E0708 06:23:18.844861 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 06:23:18.848538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:23:18.848664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:23:18.848715 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 06:23:18.848708078 +0000 UTC m=+364.789022731 E0708 06:23:18.854279 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0708 06:23:18.854750 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 06:23:18.854793 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 06:23:18.854881 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0708 06:23:18.880894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-829mh" condition "Approved" to 2026-07-08 06:23:18.880884975 +0000 UTC m=+364.821199628 I0708 06:23:18.892794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-829mh" condition "Ready" to 2026-07-08 06:23:18.892785311 +0000 UTC m=+364.833099954 I0708 06:23:18.914846 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:23:18.914787397 +0000 UTC m=+364.855102040 I0708 06:23:18.947683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:23:18.947882 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:23:18.947875348 +0000 UTC m=+364.888189981 I0708 06:23:18.964952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:23:18.997515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:23:19.006913 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:23:19.006898602 +0000 UTC m=+364.947213235 I0708 06:23:23.854969 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:23:23.854949775 +0000 UTC m=+369.795264458 I0708 06:24:06.578881 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 06:24:06.57510918 +0000 UTC m=+412.515423813 I0708 06:24:06.579215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:24:06.582387 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-08 06:24:06.58237775 +0000 UTC m=+412.522692413 I0708 06:24:06.584402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:24:06.584430 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 06:24:06.584423457 +0000 UTC m=+412.524738100 I0708 06:24:06.585066 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-08 06:24:06.585060256 +0000 UTC m=+412.525374899 I0708 06:24:06.599117 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 06:24:06.599097936 +0000 UTC m=+412.539412579 I0708 06:24:06.599436 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:24:06.603727 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-08 06:24:06.599467121 +0000 UTC m=+412.539781764 I0708 06:24:06.662394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:06.662483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:24:06.662508 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 06:24:06.662500866 +0000 UTC m=+412.602815509 I0708 06:24:06.678934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:06.679139 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 06:24:06.679129412 +0000 UTC m=+412.619444065 I0708 06:24:06.680089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:06.680180 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 06:24:06.680126276 +0000 UTC m=+412.620440919 I0708 06:24:06.799901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:06.838325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kvlfn" condition "Approved" to 2026-07-08 06:24:06.838313052 +0000 UTC m=+412.778627695 I0708 06:24:06.852310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:06.864187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kvlfn" condition "Ready" to 2026-07-08 06:24:06.864175333 +0000 UTC m=+412.804489976 I0708 06:24:06.887699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fcssg" condition "Approved" to 2026-07-08 06:24:06.887683993 +0000 UTC m=+412.827998636 I0708 06:24:06.911571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fcssg" condition "Ready" to 2026-07-08 06:24:06.911559406 +0000 UTC m=+412.851874059 I0708 06:24:06.938058 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:24:06.938042046 +0000 UTC m=+412.878356689 I0708 06:24:06.970333 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:24:06.970314713 +0000 UTC m=+412.910629356 I0708 06:24:06.974575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:06.977013 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:24:06.977006345 +0000 UTC m=+412.917320988 I0708 06:24:07.012291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:07.063222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:07.118570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:07.119567 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:24:07.119550676 +0000 UTC m=+413.059865309 I0708 06:24:07.176220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lvnsf" condition "Approved" to 2026-07-08 06:24:07.176211234 +0000 UTC m=+413.116525877 I0708 06:24:07.326505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lvnsf" condition "Ready" to 2026-07-08 06:24:07.32649624 +0000 UTC m=+413.266810883 I0708 06:24:08.022635 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:24:08.022623142 +0000 UTC m=+413.962937795 I0708 06:24:08.117030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:08.117559 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:24:08.117547826 +0000 UTC m=+414.057862499 I0708 06:24:08.318161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:14.436093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c58q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:24:14.436792 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c58q-tls" condition "Issuing" to 2026-07-08 06:24:14.436774905 +0000 UTC m=+420.377089598 I0708 06:24:14.436202 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c58q-tls" condition "Ready" to 2026-07-08 06:24:14.436177927 +0000 UTC m=+420.376492580 I0708 06:24:14.460611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c58q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6c58q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:14.460872 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c58q-tls" condition "Ready" to 2026-07-08 06:24:14.460703176 +0000 UTC m=+420.401017829 I0708 06:24:14.826390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c58q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6c58q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:14.861755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6c58q-rthdf" condition "Approved" to 2026-07-08 06:24:14.861729121 +0000 UTC m=+420.802043774 I0708 06:24:14.884775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6c58q-rthdf" condition "Ready" to 2026-07-08 06:24:14.8847631 +0000 UTC m=+420.825077743 I0708 06:24:14.914967 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c58q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:24:14.914955485 +0000 UTC m=+420.855270128 I0708 06:24:14.943318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c58q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6c58q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:26.078940 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 06:24:26.078918115 +0000 UTC m=+432.019232768 I0708 06:24:26.079453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:24:26.079479 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-08 06:24:26.079475283 +0000 UTC m=+432.019789936 I0708 06:24:26.106930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:26.107011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:24:26.107055 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-08 06:24:26.107023135 +0000 UTC m=+432.047337778 I0708 06:24:26.340288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rtzsj" condition "Approved" to 2026-07-08 06:24:26.340272049 +0000 UTC m=+432.280586702 I0708 06:24:26.368421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rtzsj" condition "Ready" to 2026-07-08 06:24:26.368402129 +0000 UTC m=+432.308716772 I0708 06:24:26.392058 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:24:26.39204393 +0000 UTC m=+432.332358573 I0708 06:24:26.408593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:24:26.409515 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:24:26.40950505 +0000 UTC m=+432.349819703 I0708 06:24:26.441706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:27:46.455974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:27:46.456072 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 06:27:46.456062741 +0000 UTC m=+632.396377384 I0708 06:27:46.456642 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-08 06:27:46.456637178 +0000 UTC m=+632.396951821 I0708 06:27:46.476039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:27:46.476100 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-08 06:27:46.476094097 +0000 UTC m=+632.416408740 I0708 06:27:46.547819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:27:46.577980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-98hds" condition "Approved" to 2026-07-08 06:27:46.577971212 +0000 UTC m=+632.518285855 I0708 06:27:46.601540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-98hds" condition "Ready" to 2026-07-08 06:27:46.601511248 +0000 UTC m=+632.541825901 I0708 06:27:46.630635 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:27:46.630624349 +0000 UTC m=+632.570939002 I0708 06:27:46.653369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:27:46.710906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:28:30.950741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 06:28:30.950781 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-08 06:28:30.950771837 +0000 UTC m=+676.891086480 I0708 06:28:30.951554 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-08 06:28:30.951550196 +0000 UTC m=+676.891864829 I0708 06:28:30.974138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:28:30.974193 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-08 06:28:30.974186709 +0000 UTC m=+676.914501352 I0708 06:28:31.187105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 06:28:31.222395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cnvcr" condition "Approved" to 2026-07-08 06:28:31.222383065 +0000 UTC m=+677.162697708 I0708 06:28:31.242463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cnvcr" condition "Ready" to 2026-07-08 06:28:31.24245183 +0000 UTC m=+677.182766483 I0708 06:28:31.295368 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 06:28:31.295353521 +0000 UTC m=+677.235668164 I0708 06:28:31.323109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"