I0708 18:49:32.860576 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0708 18:49:32.860668 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0708 18:49:32.860742 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0708 18:49:32.863683 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0708 18:49:32.864083 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0708 18:49:32.864076 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0708 18:49:32.864140 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0708 18:49:32.866656 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0708 18:49:32.882182 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0708 18:49:32.884501 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0708 18:49:32.892343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0708 18:49:32.895996 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0708 18:49:32.898397 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0708 18:49:32.898473 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0708 18:49:32.901011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0708 18:49:32.903676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0708 18:49:32.906055 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0708 18:49:32.906074 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0708 18:49:32.906154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0708 18:49:32.908088 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0708 18:49:32.911657 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0708 18:49:32.915575 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0708 18:49:32.915764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0708 18:49:32.919191 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0708 18:49:32.922348 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0708 18:49:32.924465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0708 18:49:32.926393 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0708 18:49:32.928080 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0708 18:49:32.929892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0708 18:49:32.934035 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0708 18:49:32.936747 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0708 18:49:32.936799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0708 18:49:32.939134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0708 18:49:32.942602 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 18:49:32.943145 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 18:49:32.943298 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 18:49:32.943552 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 18:49:32.966373 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 18:49:32.977770 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 18:49:32.992628 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 18:49:33.011044 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 18:49:33.026684 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 18:49:33.027219 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 18:49:45.632211 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-08 18:49:45.632194203 +0000 UTC m=+12.803356316 I0708 18:49:46.308937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:49:46.309026 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 18:49:46.309008107 +0000 UTC m=+13.480170220 I0708 18:49:46.309038 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-08 18:49:46.309026717 +0000 UTC m=+13.480188820 E0708 18:49:46.323996 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 18:49:46.324048 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-08 18:49:46.324042205 +0000 UTC m=+13.495204278 E0708 18:49:46.324102 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 18:49:46.327671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:49:46.328075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:49:46.328121 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-08 18:49:46.328099078 +0000 UTC m=+13.499261151 E0708 18:49:46.336037 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0708 18:49:46.336377 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 18:49:46.336449 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 18:49:46.336514 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0708 18:49:46.369667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4rcwc" condition "Approved" to 2026-07-08 18:49:46.369653426 +0000 UTC m=+13.540815529 I0708 18:49:46.372232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:49:46.383847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4rcwc" condition "Ready" to 2026-07-08 18:49:46.383837631 +0000 UTC m=+13.554999724 I0708 18:49:46.402005 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:49:46.401994427 +0000 UTC m=+13.573156490 I0708 18:49:46.422791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:49:46.423157 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:49:46.423150786 +0000 UTC m=+13.594312859 I0708 18:49:46.431975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:49:46.434784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:49:46.435468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:49:46.435698 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:49:46.435690356 +0000 UTC m=+13.606852439 I0708 18:49:51.336431 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:49:51.336412188 +0000 UTC m=+18.507574301 I0708 18:50:12.612271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:50:12.612304 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 18:50:12.612299475 +0000 UTC m=+39.783461558 I0708 18:50:12.612599 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-08 18:50:12.612593041 +0000 UTC m=+39.783755114 I0708 18:50:12.633605 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-08 18:50:12.633594428 +0000 UTC m=+39.804756501 I0708 18:50:12.645129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:50:12.645278 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-08 18:50:12.645268925 +0000 UTC m=+39.816431018 I0708 18:50:12.908875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:50:12.939167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lzstj" condition "Approved" to 2026-07-08 18:50:12.939152921 +0000 UTC m=+40.110315024 I0708 18:50:12.966061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lzstj" condition "Ready" to 2026-07-08 18:50:12.966052023 +0000 UTC m=+40.137214096 I0708 18:50:12.997788 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:50:12.997775344 +0000 UTC m=+40.168937427 I0708 18:50:13.027914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:50:13.090996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:54:21.995541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:54:21.995734 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-07-08 18:54:21.995720837 +0000 UTC m=+289.166882950 I0708 18:54:21.995642 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-07-08 18:54:21.995630124 +0000 UTC m=+289.166792227 I0708 18:54:22.046788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:54:22.046852 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:54:22.046866 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-07-08 18:54:22.046861106 +0000 UTC m=+289.218023179 I0708 18:54:22.243080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:54:22.249778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-lngsp" condition "Approved" to 2026-07-08 18:54:22.249757513 +0000 UTC m=+289.420919626 I0708 18:54:22.273987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-lngsp" condition "Ready" to 2026-07-08 18:54:22.273974199 +0000 UTC m=+289.445136302 I0708 18:54:22.299633 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:54:22.29961721 +0000 UTC m=+289.470779293 I0708 18:54:22.316739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:55:26.652310 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-08 18:55:26.652246107 +0000 UTC m=+353.823408190 I0708 18:55:26.652452 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:55:26.652489 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 18:55:26.652479823 +0000 UTC m=+353.823641906 E0708 18:55:26.670691 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 18:55:26.670719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:55:26.670833 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-08 18:55:26.67079836 +0000 UTC m=+353.841960433 E0708 18:55:26.670990 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 18:55:26.671001 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-08 18:55:26.670979045 +0000 UTC m=+353.842141128 E0708 18:55:26.685238 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0708 18:55:26.685503 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 18:55:26.685646 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 18:55:26.685728 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0708 18:55:26.693680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:55:26.716125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kzvsw" condition "Approved" to 2026-07-08 18:55:26.71610866 +0000 UTC m=+353.887270773 I0708 18:55:26.727958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kzvsw" condition "Ready" to 2026-07-08 18:55:26.727939818 +0000 UTC m=+353.899101931 I0708 18:55:26.746987 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:55:26.746964803 +0000 UTC m=+353.918126906 I0708 18:55:26.761050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:55:26.809975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:55:31.686481 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:55:31.686466655 +0000 UTC m=+358.857628768 I0708 18:56:11.499269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:56:11.499359 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-08 18:56:11.499351197 +0000 UTC m=+398.670513270 I0708 18:56:11.500222 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 18:56:11.500208736 +0000 UTC m=+398.671370809 I0708 18:56:11.521984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:56:11.522019 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-08 18:56:11.52201188 +0000 UTC m=+398.693173943 I0708 18:56:11.522201 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 18:56:11.522197434 +0000 UTC m=+398.693359507 I0708 18:56:11.538853 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:56:11.538889 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 18:56:11.53888193 +0000 UTC m=+398.710044003 I0708 18:56:11.538961 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-08 18:56:11.538954112 +0000 UTC m=+398.710116175 I0708 18:56:11.549218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:11.549290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:56:11.549316 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-08 18:56:11.549309881 +0000 UTC m=+398.720471954 I0708 18:56:11.557111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:11.557199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:56:11.557224 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-08 18:56:11.557217164 +0000 UTC m=+398.728379237 I0708 18:56:11.570801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:11.570872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:56:11.570906 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 18:56:11.570900351 +0000 UTC m=+398.742062424 I0708 18:56:11.716858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:11.726184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8vl4z" condition "Approved" to 2026-07-08 18:56:11.726173102 +0000 UTC m=+398.897335185 I0708 18:56:11.753907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8vl4z" condition "Ready" to 2026-07-08 18:56:11.753893222 +0000 UTC m=+398.925055285 I0708 18:56:11.791910 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:56:11.79189236 +0000 UTC m=+398.963054443 I0708 18:56:11.825581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:11.826027 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:56:11.8260182 +0000 UTC m=+398.997180293 E0708 18:56:11.847802 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-2dmtp\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0708 18:56:11.852442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:11.852955 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:56:11.852939973 +0000 UTC m=+399.024102046 I0708 18:56:11.879089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gc6wp" condition "Approved" to 2026-07-08 18:56:11.879079807 +0000 UTC m=+399.050241880 I0708 18:56:11.908246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gc6wp" condition "Ready" to 2026-07-08 18:56:11.908233601 +0000 UTC m=+399.079395674 I0708 18:56:12.001370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jlsd8" condition "Approved" to 2026-07-08 18:56:12.001353854 +0000 UTC m=+399.172515927 I0708 18:56:12.054768 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:56:12.054757397 +0000 UTC m=+399.225919470 I0708 18:56:12.151175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jlsd8" condition "Ready" to 2026-07-08 18:56:12.151161731 +0000 UTC m=+399.322323804 I0708 18:56:12.493837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:12.494406 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:56:12.494395159 +0000 UTC m=+399.665557262 I0708 18:56:12.899057 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:56:12.899042384 +0000 UTC m=+400.070204467 I0708 18:56:12.944645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:13.000556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:13.094302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:13.445253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:25.474723 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:56:25.474762 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" condition "Issuing" to 2026-07-08 18:56:25.474753316 +0000 UTC m=+412.645915399 I0708 18:56:25.475250 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" condition "Ready" to 2026-07-08 18:56:25.475228027 +0000 UTC m=+412.646390140 I0708 18:56:25.491578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:25.491823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:56:25.491930 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" condition "Issuing" to 2026-07-08 18:56:25.49191916 +0000 UTC m=+412.663081293 I0708 18:56:25.683268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6xnk5-m7nhw" condition "Approved" to 2026-07-08 18:56:25.683253278 +0000 UTC m=+412.854415371 I0708 18:56:25.700154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6xnk5-m7nhw" condition "Ready" to 2026-07-08 18:56:25.700144517 +0000 UTC m=+412.871306590 I0708 18:56:25.726027 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:56:25.726009586 +0000 UTC m=+412.897171659 I0708 18:56:25.753442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:25.757087 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:56:25.757074312 +0000 UTC m=+412.928236395 I0708 18:56:25.771087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:25.771355 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6xnk5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:56:25.771347813 +0000 UTC m=+412.942509896 I0708 18:56:31.781823 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 18:56:31.781804718 +0000 UTC m=+418.952966821 I0708 18:56:31.782125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:56:31.782159 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-08 18:56:31.782151766 +0000 UTC m=+418.953313879 I0708 18:56:31.799741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:31.799852 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 18:56:31.799846218 +0000 UTC m=+418.971008301 I0708 18:56:31.952363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:31.977375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qs7lb" condition "Approved" to 2026-07-08 18:56:31.977362165 +0000 UTC m=+419.148524238 I0708 18:56:32.011346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qs7lb" condition "Ready" to 2026-07-08 18:56:32.011336517 +0000 UTC m=+419.182498600 I0708 18:56:32.038220 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:56:32.03821012 +0000 UTC m=+419.209372183 I0708 18:56:32.066700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:56:32.127105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:59:55.319598 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 18:59:55.319628 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 18:59:55.319621407 +0000 UTC m=+622.490783490 I0708 18:59:55.319829 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-08 18:59:55.31981527 +0000 UTC m=+622.490977343 I0708 18:59:55.335590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:59:55.335674 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-08 18:59:55.335665317 +0000 UTC m=+622.506827430 I0708 18:59:55.464950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 18:59:55.497263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rcwgx" condition "Approved" to 2026-07-08 18:59:55.497250913 +0000 UTC m=+622.668412996 I0708 18:59:55.525514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rcwgx" condition "Ready" to 2026-07-08 18:59:55.525503566 +0000 UTC m=+622.696665659 I0708 18:59:55.558618 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 18:59:55.558605652 +0000 UTC m=+622.729767725 I0708 18:59:55.581227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 19:00:40.677228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 19:00:40.677308 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-08 19:00:40.67730043 +0000 UTC m=+667.848462533 I0708 19:00:40.677319 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-08 19:00:40.67726436 +0000 UTC m=+667.848426453 I0708 19:00:40.705868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 19:00:40.706318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 19:00:40.706510 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-08 19:00:40.706495909 +0000 UTC m=+667.877658012 I0708 19:00:41.112405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 19:00:41.118409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zn5tq" condition "Approved" to 2026-07-08 19:00:41.118395283 +0000 UTC m=+668.289557366 I0708 19:00:41.146492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zn5tq" condition "Ready" to 2026-07-08 19:00:41.146481673 +0000 UTC m=+668.317643756 I0708 19:00:41.185452 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 19:00:41.181069953 +0000 UTC m=+668.352232026 I0708 19:00:41.203415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 19:00:41.203720 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 19:00:41.203714929 +0000 UTC m=+668.374877002 I0708 19:00:41.225845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"