I0702 05:05:09.490255 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0702 05:05:09.490391 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0702 05:05:09.490485 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0702 05:05:09.497749 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0702 05:05:09.498374 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0702 05:05:09.498517 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0702 05:05:09.498629 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0702 05:05:09.502664 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0702 05:05:09.518710 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0702 05:05:09.523048 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0702 05:05:09.525800 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0702 05:05:09.525927 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0702 05:05:09.526536 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0702 05:05:09.530054 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0702 05:05:09.532336 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0702 05:05:09.534073 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0702 05:05:09.535868 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0702 05:05:09.537977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0702 05:05:09.539615 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0702 05:05:09.539736 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0702 05:05:09.541415 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0702 05:05:09.543316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0702 05:05:09.550603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0702 05:05:09.554847 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0702 05:05:09.557293 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0702 05:05:09.557326 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0702 05:05:09.557422 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0702 05:05:09.560078 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0702 05:05:09.562845 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0702 05:05:09.565604 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0702 05:05:09.567543 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0702 05:05:09.567683 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0702 05:05:09.569877 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0702 05:05:09.572675 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:05:09.572862 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:05:09.572903 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:05:09.591125 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:05:09.601275 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:05:09.617070 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:05:09.634992 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:05:09.650083 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:05:09.655019 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:05:09.666956 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 05:05:27.783286 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 05:05:27.783251846 +0000 UTC m=+18.321236091 I0702 05:05:28.464311 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 05:05:28.464299784 +0000 UTC m=+19.002284029 I0702 05:05:28.465130 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:05:28.465176 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 05:05:28.465170936 +0000 UTC m=+19.003155181 E0702 05:05:28.477720 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 05:05:28.477773 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 05:05:28.477768465 +0000 UTC m=+19.015752710 E0702 05:05:28.477792 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 05:05:28.479767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:05:28.479813 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:05:28.479826 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 05:05:28.479822311 +0000 UTC m=+19.017806566 E0702 05:05:28.489409 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0702 05:05:28.489581 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 05:05:28.489658 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 05:05:28.489747 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0702 05:05:28.524961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-44z2p" condition "Approved" to 2026-07-02 05:05:28.524948439 +0000 UTC m=+19.062932674 I0702 05:05:28.540439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-44z2p" condition "Ready" to 2026-07-02 05:05:28.540428124 +0000 UTC m=+19.078412369 I0702 05:05:28.563428 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:05:28.563414069 +0000 UTC m=+19.101398344 I0702 05:05:28.581327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:05:28.582232 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:05:28.582224958 +0000 UTC m=+19.120209203 I0702 05:05:28.600087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:05:28.600330 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:05:28.600322961 +0000 UTC m=+19.138307206 I0702 05:05:33.490645 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:05:33.490637129 +0000 UTC m=+24.028621354 I0702 05:05:55.065067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:05:55.065173 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 05:05:55.065163822 +0000 UTC m=+45.603148087 I0702 05:05:55.065084 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 05:05:55.06506604 +0000 UTC m=+45.603050285 I0702 05:05:55.083288 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 05:05:55.083276337 +0000 UTC m=+45.621260582 I0702 05:05:55.091788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:05:55.095564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:05:55.096140 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 05:05:55.096131661 +0000 UTC m=+45.634115916 I0702 05:05:55.354898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:05:55.371352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rr6gq" condition "Approved" to 2026-07-02 05:05:55.371340695 +0000 UTC m=+45.909324940 I0702 05:05:55.407437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rr6gq" condition "Ready" to 2026-07-02 05:05:55.407426539 +0000 UTC m=+45.945410774 I0702 05:05:55.434243 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:05:55.43423011 +0000 UTC m=+45.972214335 I0702 05:05:55.456573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:05:55.513050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:10:01.636695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:10:01.636696 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready" to 2026-07-02 05:10:01.636675324 +0000 UTC m=+292.174659569 I0702 05:10:01.636740 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-07-02 05:10:01.636730286 +0000 UTC m=+292.174714561 I0702 05:10:01.656475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:10:01.656624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:10:01.656699 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-07-02 05:10:01.656692711 +0000 UTC m=+292.194676966 I0702 05:10:01.861022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:10:01.866345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-2r48k" condition "Approved" to 2026-07-02 05:10:01.866333137 +0000 UTC m=+292.404317392 I0702 05:10:01.899136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-2r48k" condition "Ready" to 2026-07-02 05:10:01.899122074 +0000 UTC m=+292.437106349 I0702 05:10:01.925543 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:10:01.925533786 +0000 UTC m=+292.463518031 I0702 05:10:01.957711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:10:02.031709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:05.074086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:11:05.074353 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 05:11:05.074343898 +0000 UTC m=+355.612328143 I0702 05:11:05.074438 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 05:11:05.07441682 +0000 UTC m=+355.612401095 E0702 05:11:05.086837 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 05:11:05.086993 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 05:11:05.08698579 +0000 UTC m=+355.624970035 E0702 05:11:05.087152 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 05:11:05.090759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:05.090847 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 05:11:05.090838213 +0000 UTC m=+355.628822458 E0702 05:11:05.096913 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0702 05:11:05.097012 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 05:11:05.097048 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 05:11:05.097098 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0702 05:11:05.106151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:05.127043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j87vd" condition "Approved" to 2026-07-02 05:11:05.127026539 +0000 UTC m=+355.665010774 I0702 05:11:05.139295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j87vd" condition "Ready" to 2026-07-02 05:11:05.13928098 +0000 UTC m=+355.677265215 I0702 05:11:05.157641 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:05.15762513 +0000 UTC m=+355.695609375 I0702 05:11:05.177037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:10.097723 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:10.097707766 +0000 UTC m=+360.635692041 I0702 05:11:50.528390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:11:50.529667 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 05:11:50.529658747 +0000 UTC m=+401.067642982 I0702 05:11:50.528991 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 05:11:50.52897644 +0000 UTC m=+401.066960685 I0702 05:11:50.569623 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:11:50.569647 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 05:11:50.569642083 +0000 UTC m=+401.107626318 I0702 05:11:50.569760 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 05:11:50.569745955 +0000 UTC m=+401.107730190 I0702 05:11:50.569928 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:11:50.569942 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 05:11:50.56993947 +0000 UTC m=+401.107923705 I0702 05:11:50.570099 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 05:11:50.570095294 +0000 UTC m=+401.108079519 E0702 05:11:50.587461 1 controller.go:167] "re-queuing item due to error processing" err="certificates.cert-manager.io \"prometheus-tls\" already exists" logger="cert-manager.ingress-shim" key="monitoring/kube-prometheus-stack-prometheus" E0702 05:11:50.588334 1 controller.go:167] "re-queuing item due to error processing" err="certificates.cert-manager.io \"grafana-tls\" already exists" logger="cert-manager.ingress-shim" key="monitoring/kube-prometheus-stack-grafana" I0702 05:11:50.596479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:50.598618 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 05:11:50.598609468 +0000 UTC m=+401.136593693 I0702 05:11:50.616304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:50.616425 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 05:11:50.616419121 +0000 UTC m=+401.154403356 I0702 05:11:50.616508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:50.616593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:11:50.616623 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 05:11:50.616615576 +0000 UTC m=+401.154599841 I0702 05:11:50.827307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:50.877695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m7qdh" condition "Approved" to 2026-07-02 05:11:50.877674234 +0000 UTC m=+401.415658469 I0702 05:11:50.898505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m7qdh" condition "Ready" to 2026-07-02 05:11:50.898497303 +0000 UTC m=+401.436481538 I0702 05:11:50.911726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:50.918095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mp6rj" condition "Approved" to 2026-07-02 05:11:50.91808213 +0000 UTC m=+401.456066365 I0702 05:11:50.934090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mp6rj" condition "Ready" to 2026-07-02 05:11:50.934077106 +0000 UTC m=+401.472061361 I0702 05:11:50.934695 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:50.934679152 +0000 UTC m=+401.472663417 I0702 05:11:50.958592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:50.963812 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:50.963800201 +0000 UTC m=+401.501784446 I0702 05:11:50.991372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:50.992943 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:50.992936021 +0000 UTC m=+401.530920276 I0702 05:11:51.223056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:51.223363 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:51.223355995 +0000 UTC m=+401.761340230 I0702 05:11:51.333444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:51.471961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:51.637248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fvmx8" condition "Approved" to 2026-07-02 05:11:51.637233793 +0000 UTC m=+402.175218068 I0702 05:11:51.737302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fvmx8" condition "Ready" to 2026-07-02 05:11:51.737290437 +0000 UTC m=+402.275274672 I0702 05:11:52.172701 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:52.172688197 +0000 UTC m=+402.710672442 I0702 05:11:52.272019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:52.272514 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:52.272504617 +0000 UTC m=+402.810488882 I0702 05:11:52.472423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:59.149227 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nj49f-tls" condition "Ready" to 2026-07-02 05:11:59.149194242 +0000 UTC m=+409.687178517 I0702 05:11:59.149519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nj49f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:11:59.149645 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nj49f-tls" condition "Issuing" to 2026-07-02 05:11:59.149544101 +0000 UTC m=+409.687528336 I0702 05:11:59.161931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nj49f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nj49f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:59.161995 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nj49f-tls" condition "Ready" to 2026-07-02 05:11:59.161990119 +0000 UTC m=+409.699974364 I0702 05:11:59.273528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nj49f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nj49f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:59.310177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nj49f-7vkmx" condition "Approved" to 2026-07-02 05:11:59.310162255 +0000 UTC m=+409.848146530 I0702 05:11:59.328581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nj49f-7vkmx" condition "Ready" to 2026-07-02 05:11:59.32857259 +0000 UTC m=+409.866556815 I0702 05:11:59.353288 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nj49f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:11:59.353278381 +0000 UTC m=+409.891262636 I0702 05:11:59.381007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nj49f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nj49f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:11:59.451333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nj49f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nj49f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:12:13.154550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:12:13.154644 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 05:12:13.154636173 +0000 UTC m=+423.692620418 I0702 05:12:13.154860 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 05:12:13.154845288 +0000 UTC m=+423.692829523 I0702 05:12:13.174823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:12:13.174977 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 05:12:13.174969026 +0000 UTC m=+423.712953271 I0702 05:12:13.317251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:12:13.349199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rjzf9" condition "Approved" to 2026-07-02 05:12:13.349185785 +0000 UTC m=+423.887170020 I0702 05:12:13.367229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rjzf9" condition "Ready" to 2026-07-02 05:12:13.367215414 +0000 UTC m=+423.905199659 I0702 05:12:13.396820 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:12:13.396808179 +0000 UTC m=+423.934792414 I0702 05:12:13.421036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:12:13.473469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:15:15.155956 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 05:15:15.15587243 +0000 UTC m=+605.693856675 I0702 05:15:15.156027 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:15:15.156086 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 05:15:15.156070444 +0000 UTC m=+605.694054769 I0702 05:15:15.171319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:15:15.171408 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 05:15:15.171401966 +0000 UTC m=+605.709386201 I0702 05:15:15.430944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:15:15.473821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jrmsb" condition "Approved" to 2026-07-02 05:15:15.473811109 +0000 UTC m=+606.011795354 I0702 05:15:15.512720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jrmsb" condition "Ready" to 2026-07-02 05:15:15.512709428 +0000 UTC m=+606.050693673 I0702 05:15:15.591201 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:15:15.59118715 +0000 UTC m=+606.129171395 I0702 05:15:15.621188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:15:15.621572 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:15:15.621565879 +0000 UTC m=+606.159550124 I0702 05:15:15.671449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:15:53.334771 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:15:53.334822 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 05:15:53.334815389 +0000 UTC m=+643.872799624 I0702 05:15:53.334748 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 05:15:53.334729157 +0000 UTC m=+643.872713402 I0702 05:15:53.350016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:15:53.350288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 05:15:53.350327 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 05:15:53.350315316 +0000 UTC m=+643.888299591 I0702 05:15:53.776864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-n655t" condition "Approved" to 2026-07-02 05:15:53.776844639 +0000 UTC m=+644.314828904 I0702 05:15:53.795403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-n655t" condition "Ready" to 2026-07-02 05:15:53.795389059 +0000 UTC m=+644.333373324 I0702 05:15:53.823557 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 05:15:53.823544723 +0000 UTC m=+644.361528978 I0702 05:15:53.851387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 05:15:53.893895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"