I0701 07:22:37.481001 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0701 07:22:37.481169 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0701 07:22:37.481330 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0701 07:22:37.485338 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0701 07:22:37.485830 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0701 07:22:37.485907 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0701 07:22:37.485959 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0701 07:22:37.489349 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0701 07:22:37.508882 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0701 07:22:37.514949 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0701 07:22:37.515058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0701 07:22:37.518269 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0701 07:22:37.521402 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0701 07:22:37.523391 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0701 07:22:37.525084 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0701 07:22:37.525260 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0701 07:22:37.527076 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0701 07:22:37.527134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0701 07:22:37.534283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0701 07:22:37.537051 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0701 07:22:37.539469 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0701 07:22:37.542006 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0701 07:22:37.544152 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0701 07:22:37.545900 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0701 07:22:37.545923 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0701 07:22:37.545935 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0701 07:22:37.545970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0701 07:22:37.547966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0701 07:22:37.549936 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0701 07:22:37.555700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0701 07:22:37.559396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0701 07:22:37.561906 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0701 07:22:37.564849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0701 07:22:37.567657 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:22:37.568162 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:22:37.569032 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:22:37.598130 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:22:37.605261 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:22:37.623677 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:22:37.639105 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:22:37.662061 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:22:37.665975 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:22:37.683452 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:22:51.181393 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-01 07:22:51.181369888 +0000 UTC m=+13.745186748 I0701 07:22:51.879914 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:22:51.879951 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-01 07:22:51.879943744 +0000 UTC m=+14.443760604 I0701 07:22:51.880069 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-01 07:22:51.880039417 +0000 UTC m=+14.443856297 E0701 07:22:51.894701 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:22:51.894782 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-01 07:22:51.894751507 +0000 UTC m=+14.458568357 E0701 07:22:51.894807 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:22:51.897942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:22:51.898190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:22:51.898269 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-01 07:22:51.898259065 +0000 UTC m=+14.462075945 E0701 07:22:51.908198 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0701 07:22:51.908313 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:22:51.908379 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:22:51.908416 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0701 07:22:51.936641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fwwrb" condition "Approved" to 2026-07-01 07:22:51.936631188 +0000 UTC m=+14.500448048 I0701 07:22:51.948276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fwwrb" condition "Ready" to 2026-07-01 07:22:51.948265365 +0000 UTC m=+14.512082215 I0701 07:22:51.970275 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:22:51.970262819 +0000 UTC m=+14.534079679 I0701 07:22:51.988930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:22:56.909134 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:22:56.909116198 +0000 UTC m=+19.472933088 I0701 07:23:18.952524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:23:18.952555 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-01 07:23:18.952548925 +0000 UTC m=+41.516365765 I0701 07:23:18.952806 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-01 07:23:18.952802768 +0000 UTC m=+41.516619618 I0701 07:23:18.972970 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-01 07:23:18.972960158 +0000 UTC m=+41.536777008 I0701 07:23:18.999112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:23:18.999189 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:23:18.999250 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-01 07:23:18.999215688 +0000 UTC m=+41.563032548 I0701 07:23:19.234547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x9dmz" condition "Approved" to 2026-07-01 07:23:19.23453292 +0000 UTC m=+41.798349780 I0701 07:23:19.265422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x9dmz" condition "Ready" to 2026-07-01 07:23:19.265355936 +0000 UTC m=+41.829172786 I0701 07:23:19.302542 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:23:19.302531529 +0000 UTC m=+41.866348369 I0701 07:23:19.334477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:23:19.334718 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:23:19.334710082 +0000 UTC m=+41.898526932 I0701 07:23:19.358860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:27:15.422387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-111.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:27:15.422439 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-111.nip.io-tls" condition "Issuing" to 2026-07-01 07:27:15.422413048 +0000 UTC m=+277.986229908 I0701 07:27:15.422982 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-111.nip.io-tls" condition "Ready" to 2026-07-01 07:27:15.422966108 +0000 UTC m=+277.986782988 I0701 07:27:15.443756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-111.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-111.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:27:15.444006 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-111.nip.io-tls" condition "Ready" to 2026-07-01 07:27:15.443994118 +0000 UTC m=+278.007811008 I0701 07:27:15.553626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-111.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-111.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:27:15.583120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-111.nip.io-tls-pvj2s" condition "Approved" to 2026-07-01 07:27:15.583105474 +0000 UTC m=+278.146922364 I0701 07:27:15.603220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-111.nip.io-tls-pvj2s" condition "Ready" to 2026-07-01 07:27:15.603209933 +0000 UTC m=+278.167026793 I0701 07:27:15.625888 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-111.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:27:15.625871216 +0000 UTC m=+278.189688096 I0701 07:27:15.655404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-111.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-111.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:27:15.663740 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-111.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:27:15.663733192 +0000 UTC m=+278.227550032 I0701 07:27:15.715447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-111.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-111.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:27:15.715696 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-111.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:27:15.715690124 +0000 UTC m=+278.279506974 I0701 07:28:18.670639 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-01 07:28:18.670596294 +0000 UTC m=+341.234413154 I0701 07:28:18.670944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:28:18.671070 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-01 07:28:18.671053027 +0000 UTC m=+341.234869887 I0701 07:28:18.683413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:28:18.683486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:28:18.683510 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-01 07:28:18.683503594 +0000 UTC m=+341.247320454 E0701 07:28:18.686136 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:28:18.686180 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-01 07:28:18.686170509 +0000 UTC m=+341.249987369 E0701 07:28:18.686244 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:28:18.698291 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0701 07:28:18.698383 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:28:18.698415 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:28:18.698460 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0701 07:28:18.722922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:28:18.727169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-snc6x" condition "Approved" to 2026-07-01 07:28:18.727154804 +0000 UTC m=+341.290971664 I0701 07:28:18.743245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-snc6x" condition "Ready" to 2026-07-01 07:28:18.743229734 +0000 UTC m=+341.307046624 I0701 07:28:18.765883 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:28:18.765871356 +0000 UTC m=+341.329688216 I0701 07:28:18.783092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:28:18.819814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:28:23.699698 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:28:23.699684434 +0000 UTC m=+346.263501314 I0701 07:29:03.964796 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-01 07:29:03.964752427 +0000 UTC m=+386.528569287 I0701 07:29:03.965077 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:29:03.965101 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-01 07:29:03.96509667 +0000 UTC m=+386.528913530 I0701 07:29:03.965339 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:29:03.965360 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-01 07:29:03.965356552 +0000 UTC m=+386.529173412 I0701 07:29:03.965561 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-01 07:29:03.965556109 +0000 UTC m=+386.529372969 I0701 07:29:03.965716 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-01 07:29:03.965712736 +0000 UTC m=+386.529529596 I0701 07:29:03.965880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:29:03.965898 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-01 07:29:03.965894413 +0000 UTC m=+386.529711273 I0701 07:29:03.999635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:03.999687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:29:03.999710 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-01 07:29:03.999702482 +0000 UTC m=+386.563519352 I0701 07:29:04.000105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:04.000183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:29:04.000214 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-01 07:29:04.000208922 +0000 UTC m=+386.564025782 I0701 07:29:04.010333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:04.010398 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-01 07:29:04.010391527 +0000 UTC m=+386.574208367 I0701 07:29:04.255037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:04.292692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-58zr9" condition "Approved" to 2026-07-01 07:29:04.292684222 +0000 UTC m=+386.856501062 I0701 07:29:04.307441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-75dkg" condition "Approved" to 2026-07-01 07:29:04.307433572 +0000 UTC m=+386.871250422 I0701 07:29:04.329466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-58zr9" condition "Ready" to 2026-07-01 07:29:04.329457019 +0000 UTC m=+386.893273869 I0701 07:29:04.334453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-75dkg" condition "Ready" to 2026-07-01 07:29:04.334439472 +0000 UTC m=+386.898256342 I0701 07:29:04.375987 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:04.375976873 +0000 UTC m=+386.939793723 I0701 07:29:04.377411 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:04.377395391 +0000 UTC m=+386.941212271 I0701 07:29:04.398582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:04.398597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:04.398776 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:04.398770961 +0000 UTC m=+386.962587801 I0701 07:29:04.420687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:04.437065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:04.781428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:04.932953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q9j4z" condition "Approved" to 2026-07-01 07:29:04.932943933 +0000 UTC m=+387.496760793 I0701 07:29:05.041718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q9j4z" condition "Ready" to 2026-07-01 07:29:05.041708111 +0000 UTC m=+387.605524961 I0701 07:29:05.481773 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:05.481759232 +0000 UTC m=+388.045576092 I0701 07:29:05.580990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:05.581570 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:05.581560679 +0000 UTC m=+388.145377559 I0701 07:29:05.828490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:05.880743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:12.782928 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2plvs-tls" condition "Ready" to 2026-07-01 07:29:12.782901149 +0000 UTC m=+395.346718009 I0701 07:29:12.783188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2plvs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:29:12.783228 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2plvs-tls" condition "Issuing" to 2026-07-01 07:29:12.783216462 +0000 UTC m=+395.347033312 I0701 07:29:12.803937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2plvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2plvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:12.803984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2plvs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:29:12.803998 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2plvs-tls" condition "Issuing" to 2026-07-01 07:29:12.803994306 +0000 UTC m=+395.367811146 I0701 07:29:12.981005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2plvs-wk6f2" condition "Approved" to 2026-07-01 07:29:12.980989699 +0000 UTC m=+395.544806559 I0701 07:29:13.036946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2plvs-wk6f2" condition "Ready" to 2026-07-01 07:29:13.036932205 +0000 UTC m=+395.600749055 I0701 07:29:13.111352 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2plvs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:13.111337283 +0000 UTC m=+395.675154143 I0701 07:29:13.144498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2plvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2plvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:13.144786 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2plvs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:13.144781502 +0000 UTC m=+395.708598352 I0701 07:29:13.191449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2plvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2plvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:26.821502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:29:26.821530 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-01 07:29:26.821523548 +0000 UTC m=+409.385340388 I0701 07:29:26.821923 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-01 07:29:26.821918286 +0000 UTC m=+409.385735136 I0701 07:29:26.833961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:26.834099 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-01 07:29:26.834091509 +0000 UTC m=+409.397908359 I0701 07:29:26.920273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:26.953368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-smggk" condition "Approved" to 2026-07-01 07:29:26.95334068 +0000 UTC m=+409.517157560 I0701 07:29:26.977494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-smggk" condition "Ready" to 2026-07-01 07:29:26.977481156 +0000 UTC m=+409.541298006 I0701 07:29:27.012247 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:27.012225194 +0000 UTC m=+409.576042054 I0701 07:29:27.034712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:27.035296 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:27.035285945 +0000 UTC m=+409.599102825 I0701 07:29:27.037381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:27.052910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:27.053479 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:27.053465514 +0000 UTC m=+409.617282354 I0701 07:29:27.060445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:32:42.609322 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-01 07:32:42.609302466 +0000 UTC m=+605.173119346 I0701 07:32:42.610151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:32:42.610918 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-01 07:32:42.610891989 +0000 UTC m=+605.174708939 I0701 07:32:42.629484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:32:42.629849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:32:42.629998 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-01 07:32:42.629971016 +0000 UTC m=+605.193787876 I0701 07:32:42.803686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sdnl2" condition "Approved" to 2026-07-01 07:32:42.803673964 +0000 UTC m=+605.367490824 I0701 07:32:42.820837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sdnl2" condition "Ready" to 2026-07-01 07:32:42.820826796 +0000 UTC m=+605.384643646 I0701 07:32:42.847578 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:32:42.84756826 +0000 UTC m=+605.411385120 I0701 07:32:42.870436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:32:42.870833 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:32:42.870827137 +0000 UTC m=+605.434643997 I0701 07:32:42.890781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:32:42.894066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:32:42.894457 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:32:42.894450138 +0000 UTC m=+605.458266998 I0701 07:33:24.974377 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-01 07:33:24.974363354 +0000 UTC m=+647.538180244 I0701 07:33:24.974749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:33:24.974838 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-01 07:33:24.974832365 +0000 UTC m=+647.538649215 I0701 07:33:24.991160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:33:24.991266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:33:24.991303 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-01 07:33:24.991283386 +0000 UTC m=+647.555100236 I0701 07:33:25.255043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5kf5n" condition "Approved" to 2026-07-01 07:33:25.255031983 +0000 UTC m=+647.818848843 I0701 07:33:25.272682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5kf5n" condition "Ready" to 2026-07-01 07:33:25.272672383 +0000 UTC m=+647.836489243 I0701 07:33:25.296286 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:33:25.296269628 +0000 UTC m=+647.860086468 I0701 07:33:25.321313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"