I0710 21:22:04.389743 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0710 21:22:04.390184 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0710 21:22:04.393782 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0710 21:22:04.393831 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0710 21:22:04.393852 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0710 21:22:04.394592 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0710 21:22:04.394678 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0710 21:22:04.394891 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0710 21:22:04.399517 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0710 21:22:04.415943 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0710 21:22:04.421739 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0710 21:22:04.421871 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0710 21:22:04.424736 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0710 21:22:04.427778 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0710 21:22:04.430244 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0710 21:22:04.436026 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0710 21:22:04.439805 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0710 21:22:04.439838 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0710 21:22:04.442239 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0710 21:22:04.442365 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0710 21:22:04.444783 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0710 21:22:04.448373 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0710 21:22:04.451162 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0710 21:22:04.451260 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0710 21:22:04.459248 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0710 21:22:04.461850 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0710 21:22:04.464301 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0710 21:22:04.466355 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0710 21:22:04.466368 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0710 21:22:04.466454 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0710 21:22:04.468469 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0710 21:22:04.470515 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0710 21:22:04.472247 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0710 21:22:04.475074 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0710 21:22:04.480907 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:04.480994 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:04.481122 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:04.481426 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:04.481815 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:04.482007 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:04.505489 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:04.523117 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:04.543752 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:04.561834 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:04.578468 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0710 21:22:15.424461 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-10 21:22:15.424425026 +0000 UTC m=+11.060918150 I0710 21:22:16.254513 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-10 21:22:16.254493393 +0000 UTC m=+11.890986528 I0710 21:22:16.254673 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:22:16.255252 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-10 21:22:16.255212277 +0000 UTC m=+11.891705401 E0710 21:22:16.295133 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0710 21:22:16.295705 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-10 21:22:16.295479552 +0000 UTC m=+11.931972686 E0710 21:22:16.295875 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0710 21:22:16.296205 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:22:16.296329 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-10 21:22:16.2963167 +0000 UTC m=+11.932809834 E0710 21:22:16.326962 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0710 21:22:16.327350 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0710 21:22:16.327558 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0710 21:22:16.327770 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0710 21:22:16.356803 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:22:16.390750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-10 21:22:16.390732018 +0000 UTC m=+12.027225122 I0710 21:22:16.473977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-10 21:22:16.473967324 +0000 UTC m=+12.110460418 I0710 21:22:16.502122 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:22:16.502111727 +0000 UTC m=+12.138604831 I0710 21:22:16.517374 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:22:16.517768 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:22:16.517760626 +0000 UTC m=+12.154253720 I0710 21:22:16.539814 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:22:21.328131 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:22:21.328101105 +0000 UTC m=+16.964594229 I0710 21:22:43.920579 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:22:43.920658 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-10 21:22:43.920607653 +0000 UTC m=+39.557100757 I0710 21:22:43.922736 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-10 21:22:43.922716892 +0000 UTC m=+39.559209996 I0710 21:22:43.931749 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-10 21:22:43.931736205 +0000 UTC m=+39.568229299 I0710 21:22:43.936390 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:22:43.936534 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-10 21:22:43.936527218 +0000 UTC m=+39.573020322 I0710 21:22:44.378275 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:22:44.411562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-10 21:22:44.411543628 +0000 UTC m=+40.048036732 I0710 21:22:44.441906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-10 21:22:44.44189175 +0000 UTC m=+40.078384864 I0710 21:22:44.479549 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:22:44.479529085 +0000 UTC m=+40.116022209 I0710 21:22:44.506171 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:22:44.509945 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:22:44.5099302 +0000 UTC m=+40.146423314 I0710 21:22:44.537540 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:22:44.561549 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:26:42.467131 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-250.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:26:42.467220 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Issuing" to 2026-07-10 21:26:42.467179585 +0000 UTC m=+278.103672689 I0710 21:26:42.468317 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready" to 2026-07-10 21:26:42.468303461 +0000 UTC m=+278.104796605 I0710 21:26:42.477835 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:26:42.477892 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready" to 2026-07-10 21:26:42.477886241 +0000 UTC m=+278.114379345 I0710 21:26:42.632839 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:26:42.662347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-250.nip.io-tls-1" condition "Approved" to 2026-07-10 21:26:42.662330765 +0000 UTC m=+278.298823869 I0710 21:26:42.680704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-250.nip.io-tls-1" condition "Ready" to 2026-07-10 21:26:42.680692668 +0000 UTC m=+278.317185772 I0710 21:26:42.702485 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:26:42.702474731 +0000 UTC m=+278.338967835 I0710 21:26:42.716813 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:26:42.717737 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:26:42.717729733 +0000 UTC m=+278.354222827 I0710 21:26:42.729560 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:27:48.034114 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:27:48.034182 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-10 21:27:48.034153407 +0000 UTC m=+343.670646501 I0710 21:27:48.034354 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-10 21:27:48.03425603 +0000 UTC m=+343.670749204 E0710 21:27:48.044205 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0710 21:27:48.044239 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-10 21:27:48.044235015 +0000 UTC m=+343.680728109 E0710 21:27:48.044251 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0710 21:27:48.045290 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:27:48.045443 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:27:48.045479 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-10 21:27:48.04546963 +0000 UTC m=+343.681962754 E0710 21:27:48.054836 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0710 21:27:48.055306 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0710 21:27:48.055364 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0710 21:27:48.055729 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0710 21:27:48.077141 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:27:48.082823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-10 21:27:48.082814087 +0000 UTC m=+343.719307191 I0710 21:27:48.094516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-10 21:27:48.094505008 +0000 UTC m=+343.730998102 I0710 21:27:48.109911 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:27:48.109900372 +0000 UTC m=+343.746393466 I0710 21:27:48.123844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:27:48.124334 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:27:48.124323189 +0000 UTC m=+343.760816313 I0710 21:27:48.145556 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:27:53.055142 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:27:53.055133874 +0000 UTC m=+348.691626968 I0710 21:28:32.086959 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-10 21:28:32.086921144 +0000 UTC m=+387.723414238 I0710 21:28:32.087041 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-10 21:28:32.087028227 +0000 UTC m=+387.723521321 I0710 21:28:32.087926 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:28:32.087952 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-10 21:28:32.08794914 +0000 UTC m=+387.724442244 I0710 21:28:32.088117 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:28:32.089353 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-10 21:28:32.089349216 +0000 UTC m=+387.725842300 I0710 21:28:32.089460 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-10 21:28:32.089453868 +0000 UTC m=+387.725946952 I0710 21:28:32.089794 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:28:32.089825 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-10 21:28:32.089820948 +0000 UTC m=+387.726314042 I0710 21:28:32.117290 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:32.117371 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:28:32.117373 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:32.117405 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-10 21:28:32.11739873 +0000 UTC m=+387.753891834 I0710 21:28:32.117599 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:28:32.117623 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-10 21:28:32.117615426 +0000 UTC m=+387.754108520 I0710 21:28:32.122098 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:32.122158 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-10 21:28:32.122152101 +0000 UTC m=+387.758645195 I0710 21:28:32.251780 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:32.261138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-10 21:28:32.26112372 +0000 UTC m=+387.897616824 I0710 21:28:32.295063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-10 21:28:32.295054733 +0000 UTC m=+387.931547817 I0710 21:28:32.325206 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:32.332094 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:28:32.332081046 +0000 UTC m=+387.968574150 I0710 21:28:32.346036 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:32.355595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-10 21:28:32.355578435 +0000 UTC m=+387.992071569 I0710 21:28:32.384454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-10 21:28:32.38444294 +0000 UTC m=+388.020936044 I0710 21:28:32.446243 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:28:32.446231463 +0000 UTC m=+388.082724547 I0710 21:28:32.508416 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:32.509024 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:28:32.509016842 +0000 UTC m=+388.145509946 I0710 21:28:32.761611 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:32.972731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-10 21:28:32.97269365 +0000 UTC m=+388.609186734 I0710 21:28:33.078868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-10 21:28:33.078852729 +0000 UTC m=+388.715345853 I0710 21:28:33.514719 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:28:33.51470276 +0000 UTC m=+389.151195894 I0710 21:28:33.611022 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:33.611980 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:28:33.611965994 +0000 UTC m=+389.248459128 I0710 21:28:33.810667 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:39.822554 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:28:39.822585 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls" condition "Issuing" to 2026-07-10 21:28:39.822576168 +0000 UTC m=+395.459069262 I0710 21:28:39.822634 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls" condition "Ready" to 2026-07-10 21:28:39.82262879 +0000 UTC m=+395.459121884 I0710 21:28:39.832276 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:39.833533 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls" condition "Ready" to 2026-07-10 21:28:39.833522014 +0000 UTC m=+395.470015138 I0710 21:28:39.950434 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:40.024269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls-1" condition "Approved" to 2026-07-10 21:28:40.024249389 +0000 UTC m=+395.660742523 I0710 21:28:40.114171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls-1" condition "Ready" to 2026-07-10 21:28:40.114158302 +0000 UTC m=+395.750651396 I0710 21:28:40.182061 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:28:40.182047689 +0000 UTC m=+395.818540783 I0710 21:28:40.254275 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:40.378835 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nj8dz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:51.166550 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:28:51.166584 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-10 21:28:51.166574084 +0000 UTC m=+406.803067178 I0710 21:28:51.167686 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-10 21:28:51.167668251 +0000 UTC m=+406.804161345 I0710 21:28:51.184585 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:51.184645 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:28:51.184690 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-10 21:28:51.184683443 +0000 UTC m=+406.821176547 I0710 21:28:51.406105 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-10 21:28:51.406094218 +0000 UTC m=+407.042587322 I0710 21:28:51.420477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-10 21:28:51.420463045 +0000 UTC m=+407.056956139 I0710 21:28:51.448053 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:28:51.448039167 +0000 UTC m=+407.084532271 I0710 21:28:51.461392 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:28:51.462437 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:28:51.462431864 +0000 UTC m=+407.098924948 I0710 21:28:51.482731 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:32:03.621368 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:32:03.621403 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-10 21:32:03.621393378 +0000 UTC m=+599.257886482 I0710 21:32:03.621681 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-10 21:32:03.621626973 +0000 UTC m=+599.258120077 I0710 21:32:03.634880 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:32:03.635008 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-10 21:32:03.634967029 +0000 UTC m=+599.271460133 I0710 21:32:03.789682 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:32:03.822697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-10 21:32:03.822682913 +0000 UTC m=+599.459176027 I0710 21:32:03.834922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-10 21:32:03.834911595 +0000 UTC m=+599.471404699 I0710 21:32:03.870104 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:32:03.87008698 +0000 UTC m=+599.506580114 I0710 21:32:03.879197 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:32:03.879718 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:32:03.879711856 +0000 UTC m=+599.516204960 I0710 21:32:03.888567 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:32:03.888585 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:32:03.889137 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:32:03.889129467 +0000 UTC m=+599.525622561 I0710 21:32:44.950907 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0710 21:32:44.950933 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-10 21:32:44.950928269 +0000 UTC m=+640.587421363 I0710 21:32:44.951308 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-10 21:32:44.951304207 +0000 UTC m=+640.587797301 I0710 21:32:44.966823 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:32:44.966949 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-10 21:32:44.966940259 +0000 UTC m=+640.603433363 I0710 21:32:45.309983 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:32:45.332716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-10 21:32:45.332703022 +0000 UTC m=+640.969196136 I0710 21:32:45.353763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-10 21:32:45.353751597 +0000 UTC m=+640.990244701 I0710 21:32:45.379187 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:32:45.379178105 +0000 UTC m=+641.015671209 I0710 21:32:45.391634 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0710 21:32:45.392220 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-10 21:32:45.392211801 +0000 UTC m=+641.028704885 I0710 21:32:45.405105 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"