I0702 15:37:20.070136 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0702 15:37:20.070396 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0702 15:37:20.075610 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0702 15:37:20.075643 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0702 15:37:20.075681 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0702 15:37:20.076225 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0702 15:37:20.076308 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0702 15:37:20.076516 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0702 15:37:20.082210 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0702 15:37:20.099128 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0702 15:37:20.105175 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0702 15:37:20.105520 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0702 15:37:20.105581 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0702 15:37:20.105340 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0702 15:37:20.108947 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0702 15:37:20.114935 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0702 15:37:20.117813 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0702 15:37:20.121111 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0702 15:37:20.121239 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0702 15:37:20.124015 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0702 15:37:20.126594 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0702 15:37:20.126853 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0702 15:37:20.131780 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0702 15:37:20.134635 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0702 15:37:20.136621 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0702 15:37:20.138783 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0702 15:37:20.140874 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0702 15:37:20.142801 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0702 15:37:20.142930 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0702 15:37:20.146354 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0702 15:37:20.152826 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0702 15:37:20.155302 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0702 15:37:20.157156 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0702 15:37:20.159396 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0702 15:37:20.162680 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:20.162734 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:20.162821 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:20.163237 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:20.163532 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:20.181044 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:20.204674 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:20.226861 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:20.247056 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:20.267292 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:20.282467 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0702 15:37:33.867681 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 15:37:33.867642634 +0000 UTC m=+13.826426847 I0702 15:37:34.649408 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 15:37:34.649295929 +0000 UTC m=+14.608080172 I0702 15:37:34.650051 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:37:34.650130 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 15:37:34.65011894 +0000 UTC m=+14.608903163 E0702 15:37:34.665621 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 15:37:34.665717 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 15:37:34.665707205 +0000 UTC m=+14.624491418 E0702 15:37:34.665743 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 15:37:34.666223 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:37:34.666360 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 15:37:34.666348861 +0000 UTC m=+14.625133074 E0702 15:37:34.675673 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0702 15:37:34.675764 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:37:34.675792 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:37:34.675821 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0702 15:37:34.682440 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:37:34.711049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-02 15:37:34.711032883 +0000 UTC m=+14.669817076 I0702 15:37:34.732121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-02 15:37:34.732105346 +0000 UTC m=+14.690889569 I0702 15:37:34.762886 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:37:34.762875425 +0000 UTC m=+14.721659638 I0702 15:37:34.774054 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:37:34.774422 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:37:34.774414807 +0000 UTC m=+14.733199030 I0702 15:37:34.781231 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:37:34.788176 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:37:39.676652 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:37:39.676638707 +0000 UTC m=+19.635422920 I0702 15:38:00.703380 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:38:00.703459 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 15:38:00.703448333 +0000 UTC m=+40.662232526 I0702 15:38:00.703996 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 15:38:00.703334771 +0000 UTC m=+40.662118964 I0702 15:38:00.715306 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 15:38:00.715284834 +0000 UTC m=+40.674069037 I0702 15:38:00.717094 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:38:00.717218 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 15:38:00.717205282 +0000 UTC m=+40.675989475 I0702 15:38:00.804392 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:38:00.837244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-02 15:38:00.837218162 +0000 UTC m=+40.796002365 I0702 15:38:00.868529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-02 15:38:00.868514764 +0000 UTC m=+40.827298957 I0702 15:38:00.896426 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:38:00.89640482 +0000 UTC m=+40.855189043 I0702 15:38:00.911805 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:38:00.912851 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:38:00.912837506 +0000 UTC m=+40.871621699 I0702 15:38:00.932958 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:14.357727 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-02 15:40:14.357675323 +0000 UTC m=+174.316459586 I0702 15:40:14.358454 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:40:14.358505 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-02 15:40:14.358498445 +0000 UTC m=+174.317282668 E0702 15:40:14.371864 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 15:40:14.371941 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-02 15:40:14.371933195 +0000 UTC m=+174.330717418 I0702 15:40:14.371967 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 15:40:14.377844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:14.377913 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-02 15:40:14.377909045 +0000 UTC m=+174.336693238 E0702 15:40:14.383350 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E0702 15:40:14.383501 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 15:40:14.383579 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0702 15:40:14.383615 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0702 15:40:14.386390 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-02 15:40:14.38638341 +0000 UTC m=+174.345167593 I0702 15:40:14.386398 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:40:14.386465 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-02 15:40:14.386453912 +0000 UTC m=+174.345238095 I0702 15:40:14.396230 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:14.396329 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:40:14.396374 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-02 15:40:14.396366842 +0000 UTC m=+174.355151065 I0702 15:40:14.455812 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:14.494159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-07-02 15:40:14.494136754 +0000 UTC m=+174.452920977 I0702 15:40:14.512740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-07-02 15:40:14.512720634 +0000 UTC m=+174.471504807 I0702 15:40:14.541268 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:40:14.541248435 +0000 UTC m=+174.500032648 I0702 15:40:14.560571 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:14.561828 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:40:14.561811825 +0000 UTC m=+174.520596038 I0702 15:40:14.595152 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:14.605494 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:14.685674 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:14.698449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-07-02 15:40:14.698424429 +0000 UTC m=+174.657208642 I0702 15:40:14.713971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-07-02 15:40:14.713937991 +0000 UTC m=+174.672722184 I0702 15:40:19.385031 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:40:19.385013226 +0000 UTC m=+179.343797419 I0702 15:40:19.399849 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:40:19.39983359 +0000 UTC m=+179.358617773 I0702 15:40:19.427604 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:40:19.427585462 +0000 UTC m=+179.386369655 I0702 15:40:19.441514 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:19.442199 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:40:19.442189401 +0000 UTC m=+179.400973594 I0702 15:40:19.454098 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:19.456839 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:43:02.740692 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:43:02.740777 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Issuing" to 2026-07-02 15:43:02.74076157 +0000 UTC m=+342.699545803 I0702 15:43:02.741161 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-07-02 15:43:02.741146019 +0000 UTC m=+342.699930202 I0702 15:43:02.753796 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:43:02.754125 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-07-02 15:43:02.754102606 +0000 UTC m=+342.712886789 I0702 15:43:02.974202 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:43:03.009686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-1" condition "Approved" to 2026-07-02 15:43:03.009671176 +0000 UTC m=+342.968455369 I0702 15:43:03.026838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-1" condition "Ready" to 2026-07-02 15:43:03.026818149 +0000 UTC m=+342.985602402 I0702 15:43:03.049488 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:43:03.049480292 +0000 UTC m=+343.008264485 I0702 15:43:03.065997 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:43:03.114538 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:44:16.431715 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 15:44:16.431693051 +0000 UTC m=+416.390477264 I0702 15:44:16.431942 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:44:16.432083 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 15:44:16.43206668 +0000 UTC m=+416.390850954 I0702 15:44:16.443068 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:44:16.443174 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 15:44:16.44316137 +0000 UTC m=+416.401945593 E0702 15:44:16.445144 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 15:44:16.445217 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 15:44:16.445209342 +0000 UTC m=+416.403993545 E0702 15:44:16.445240 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:44:16.456216 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0702 15:44:16.456425 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:44:16.456471 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:44:16.456557 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0702 15:44:16.457339 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:44:16.478247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-02 15:44:16.478232374 +0000 UTC m=+416.437016597 I0702 15:44:16.492625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-02 15:44:16.492609888 +0000 UTC m=+416.451394081 I0702 15:44:16.513863 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:44:16.513848462 +0000 UTC m=+416.472632655 I0702 15:44:16.531644 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:44:16.532858 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:44:16.532847602 +0000 UTC m=+416.491631795 I0702 15:44:16.537892 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:44:16.547472 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:44:21.457619 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:44:21.457601934 +0000 UTC m=+421.416386147 I0702 15:45:04.364074 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:45:04.364153 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 15:45:04.364143202 +0000 UTC m=+464.322927385 I0702 15:45:04.364703 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 15:45:04.364697856 +0000 UTC m=+464.323482029 I0702 15:45:04.368625 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:45:04.368651 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 15:45:04.368646466 +0000 UTC m=+464.327430649 I0702 15:45:04.368995 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 15:45:04.368990085 +0000 UTC m=+464.327774268 I0702 15:45:04.369203 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:45:04.369217 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 15:45:04.36921409 +0000 UTC m=+464.327998273 I0702 15:45:04.369429 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 15:45:04.369423846 +0000 UTC m=+464.328208039 I0702 15:45:04.404640 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:04.404772 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:45:04.404811 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 15:45:04.404803137 +0000 UTC m=+464.363587340 I0702 15:45:04.405549 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:04.405596 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:45:04.405617 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 15:45:04.405612867 +0000 UTC m=+464.364397060 I0702 15:45:04.405719 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:04.405854 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:45:04.405944 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 15:45:04.405933845 +0000 UTC m=+464.364718038 I0702 15:45:04.569312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-02 15:45:04.569293798 +0000 UTC m=+464.528078021 I0702 15:45:04.587034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-02 15:45:04.587014694 +0000 UTC m=+464.545798917 I0702 15:45:04.608704 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:04.613037 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:45:04.613016359 +0000 UTC m=+464.571800582 I0702 15:45:04.621400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-02 15:45:04.62138505 +0000 UTC m=+464.580169233 I0702 15:45:04.627705 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:04.628335 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:45:04.628325004 +0000 UTC m=+464.587109207 I0702 15:45:04.636184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-02 15:45:04.636175552 +0000 UTC m=+464.594959755 I0702 15:45:04.647527 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:04.773998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-02 15:45:04.773973581 +0000 UTC m=+464.732757784 I0702 15:45:04.861301 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:45:04.86127968 +0000 UTC m=+464.820063903 I0702 15:45:05.114276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-02 15:45:05.11425985 +0000 UTC m=+465.073044043 I0702 15:45:05.311768 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:05.315149 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:45:05.315131038 +0000 UTC m=+465.273915231 I0702 15:45:05.669307 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:45:05.669287925 +0000 UTC m=+465.628072118 I0702 15:45:05.707366 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:05.856095 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:05.856778 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:45:05.856769366 +0000 UTC m=+465.815553549 I0702 15:45:06.160512 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:06.204335 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:13.157857 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-btrw5-tls" condition "Ready" to 2026-07-02 15:45:13.157841941 +0000 UTC m=+473.116626134 I0702 15:45:13.158066 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btrw5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:45:13.158169 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-btrw5-tls" condition "Issuing" to 2026-07-02 15:45:13.158157298 +0000 UTC m=+473.116941491 I0702 15:45:13.170816 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btrw5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-btrw5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:13.170922 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btrw5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:45:13.170954 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-btrw5-tls" condition "Issuing" to 2026-07-02 15:45:13.170945511 +0000 UTC m=+473.129729694 I0702 15:45:13.297857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-btrw5-tls-1" condition "Approved" to 2026-07-02 15:45:13.297834205 +0000 UTC m=+473.256618408 I0702 15:45:13.385470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-btrw5-tls-1" condition "Ready" to 2026-07-02 15:45:13.385449531 +0000 UTC m=+473.344233744 I0702 15:45:13.514328 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-btrw5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:45:13.514315796 +0000 UTC m=+473.473099979 I0702 15:45:13.530084 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btrw5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-btrw5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:37.790704 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:45:37.790757 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 15:45:37.790744017 +0000 UTC m=+497.749528210 I0702 15:45:37.791186 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 15:45:37.791161137 +0000 UTC m=+497.749945320 I0702 15:45:37.803988 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:37.804166 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:45:37.804200 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 15:45:37.804192816 +0000 UTC m=+497.762976999 I0702 15:45:37.952522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-02 15:45:37.9524951 +0000 UTC m=+497.911279303 I0702 15:45:37.970457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-02 15:45:37.970439761 +0000 UTC m=+497.929223954 I0702 15:45:38.003090 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:45:38.003074653 +0000 UTC m=+497.961858866 I0702 15:45:38.016085 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:45:38.016731 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:45:38.016718357 +0000 UTC m=+497.975502550 I0702 15:45:38.031130 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:49:25.394502 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:49:25.394499 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 15:49:25.394448543 +0000 UTC m=+725.353232806 I0702 15:49:25.394621 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 15:49:25.394607817 +0000 UTC m=+725.353392030 I0702 15:49:25.410908 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:49:25.411090 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:49:25.411142 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 15:49:25.411131181 +0000 UTC m=+725.369915374 I0702 15:49:25.661601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-02 15:49:25.661584002 +0000 UTC m=+725.620368195 I0702 15:49:25.681231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-02 15:49:25.681217954 +0000 UTC m=+725.640002127 I0702 15:49:25.709551 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:49:25.709542613 +0000 UTC m=+725.668326806 I0702 15:49:25.722989 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:49:25.723533 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:49:25.723525643 +0000 UTC m=+725.682309836 I0702 15:49:25.751206 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:59.615305 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:51:59.615395 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-02 15:51:59.615385766 +0000 UTC m=+879.574169989 I0702 15:51:59.615792 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-02 15:51:59.615192732 +0000 UTC m=+879.573976915 I0702 15:51:59.629276 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:59.629413 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:51:59.629445 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-02 15:51:59.629433839 +0000 UTC m=+879.588218062 I0702 15:52:00.041483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-07-02 15:52:00.041449444 +0000 UTC m=+880.000233667 I0702 15:52:00.056349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-07-02 15:52:00.056337359 +0000 UTC m=+880.015121582 I0702 15:52:00.081277 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:52:00.081255073 +0000 UTC m=+880.040039296 I0702 15:52:00.098860 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:52:00.111700 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:52:00.156612 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:53:13.461648 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-02 15:53:13.461620925 +0000 UTC m=+953.420405108 I0702 15:53:13.462058 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:53:13.462110 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-02 15:53:13.462102637 +0000 UTC m=+953.420886840 I0702 15:53:13.478306 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:53:13.478380 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-02 15:53:13.478373226 +0000 UTC m=+953.437157399 I0702 15:53:13.559232 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:53:13.584557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-07-02 15:53:13.584544571 +0000 UTC m=+953.543328764 I0702 15:53:13.598340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-07-02 15:53:13.598326997 +0000 UTC m=+953.557111190 I0702 15:53:13.629791 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:53:13.629773537 +0000 UTC m=+953.588557760 I0702 15:53:13.641697 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:53:13.690948 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" E0702 15:54:16.274341 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0702 15:54:29.545985 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out E0702 15:54:49.269228 1 leaderelection.go:340] Failed to update lock optimitically: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded, falling back to slow path E0702 15:54:49.269443 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: client rate limiter Wait returned an error: context deadline exceeded I0702 15:54:49.269489 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0702 15:54:56.274687 1 leaderelection.go:308] Failed to release lock: etcdserver: request timed out I0702 15:54:56.274811 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-ca" I0702 15:54:56.274969 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-vault" I0702 15:54:56.274996 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-venafi" I0702 15:54:56.275014 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-selfsigned" I0702 15:54:56.275036 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-request-manager" I0702 15:54:56.275055 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-trigger" I0702 15:54:56.275075 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.orders" I0702 15:54:56.275095 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-acme" I0702 15:54:56.275111 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-key-manager" I0702 15:54:56.275183 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-issuing" I0702 15:54:56.275183 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.clusterissuers" I0702 15:54:56.275203 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-metrics" I0702 15:54:56.275211 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.issuers" I0702 15:54:56.275212 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-approver" I0702 15:54:56.275222 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-revision-manager" I0702 15:54:56.275233 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.challenges" I0702 15:54:56.275245 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.ingress-shim" I0702 15:54:56.275247 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-readiness" E0702 15:54:56.275499 1 main.go:40] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"