I0728 20:01:45.857579 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0728 20:01:45.857854 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0728 20:01:45.861278 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0728 20:01:45.861320 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0728 20:01:45.861334 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0728 20:01:45.861799 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0728 20:01:45.861771 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0728 20:01:45.861794 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0728 20:01:45.866235 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0728 20:01:45.876007 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0728 20:01:45.882733 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0728 20:01:45.882778 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0728 20:01:45.882909 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0728 20:01:45.888050 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0728 20:01:45.891804 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0728 20:01:45.894357 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0728 20:01:45.897089 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0728 20:01:45.899374 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0728 20:01:45.899480 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0728 20:01:45.901245 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0728 20:01:45.904847 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0728 20:01:45.906720 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0728 20:01:45.906848 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0728 20:01:45.908667 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0728 20:01:45.910334 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0728 20:01:45.912068 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0728 20:01:45.914055 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0728 20:01:45.916175 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0728 20:01:45.920169 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0728 20:01:45.920194 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0728 20:01:45.920318 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0728 20:01:45.922970 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0728 20:01:45.925398 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0728 20:01:45.928148 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0728 20:01:45.929988 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:45.932331 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:45.932374 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:45.932820 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:45.933191 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:45.948092 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:45.962881 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:45.978525 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:46.018762 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:46.037760 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:46.052481 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:01:58.930923 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-28 20:01:58.930906454 +0000 UTC m=+13.094203434 I0728 20:01:59.615165 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 20:01:59.615146978 +0000 UTC m=+13.778443998 I0728 20:01:59.615237 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:01:59.615326 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-28 20:01:59.61528668 +0000 UTC m=+13.778583700 I0728 20:01:59.629235 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:01:59.629353 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 20:01:59.629343248 +0000 UTC m=+13.792640238 E0728 20:01:59.629741 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 20:01:59.629804 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-28 20:01:59.629796027 +0000 UTC m=+13.793093017 E0728 20:01:59.629824 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 20:01:59.642712 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0728 20:01:59.642833 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 20:01:59.642866 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 20:01:59.642891 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0728 20:01:59.642896 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0728 20:01:59.675658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-28 20:01:59.675638182 +0000 UTC m=+13.838935162 I0728 20:01:59.696119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-28 20:01:59.696106649 +0000 UTC m=+13.859403639 I0728 20:01:59.719307 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:01:59.719293532 +0000 UTC m=+13.882590522 I0728 20:01:59.735928 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:01:59.771922 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:02:04.644018 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:02:04.644004522 +0000 UTC m=+18.807301542 I0728 20:02:27.310796 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:02:27.310864 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-28 20:02:27.310851445 +0000 UTC m=+41.474148435 I0728 20:02:27.311706 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 20:02:27.311700468 +0000 UTC m=+41.474997448 I0728 20:02:27.326354 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-28 20:02:27.3263428 +0000 UTC m=+41.489639780 I0728 20:02:27.338107 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:02:27.338232 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 20:02:27.338222542 +0000 UTC m=+41.501519532 I0728 20:02:27.600527 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:02:27.631504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-28 20:02:27.6314894 +0000 UTC m=+41.794786390 I0728 20:02:27.666599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-28 20:02:27.666585895 +0000 UTC m=+41.829882885 I0728 20:02:27.698560 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:02:27.698549812 +0000 UTC m=+41.861846792 I0728 20:02:27.709772 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:02:27.710447 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:02:27.710437383 +0000 UTC m=+41.873734373 I0728 20:02:27.716901 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:02:27.723319 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:06:33.090265 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-07-28 20:06:33.090168026 +0000 UTC m=+287.253465036 I0728 20:06:33.090130 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-109.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:06:33.090687 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Issuing" to 2026-07-28 20:06:33.090674694 +0000 UTC m=+287.253971684 I0728 20:06:33.106323 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:06:33.106524 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-07-28 20:06:33.106486587 +0000 UTC m=+287.269783567 I0728 20:06:33.189207 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:06:33.230704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-1" condition "Approved" to 2026-07-28 20:06:33.230676067 +0000 UTC m=+287.393973047 I0728 20:06:33.247662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-1" condition "Ready" to 2026-07-28 20:06:33.247642838 +0000 UTC m=+287.410939828 I0728 20:06:33.273885 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:06:33.273867155 +0000 UTC m=+287.437164145 I0728 20:06:33.288878 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:07:37.653700 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:07:37.653784 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 20:07:37.653749135 +0000 UTC m=+351.817046155 I0728 20:07:37.653790 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-28 20:07:37.653767225 +0000 UTC m=+351.817064245 E0728 20:07:37.665153 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 20:07:37.665260 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-28 20:07:37.665219446 +0000 UTC m=+351.828516456 E0728 20:07:37.665295 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 20:07:37.665853 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:07:37.665932 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:07:37.665970 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-28 20:07:37.665962436 +0000 UTC m=+351.829259456 E0728 20:07:37.675233 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0728 20:07:37.675308 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 20:07:37.675373 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 20:07:37.675508 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0728 20:07:37.698563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-28 20:07:37.698552891 +0000 UTC m=+351.861849881 I0728 20:07:37.745108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-28 20:07:37.745100242 +0000 UTC m=+351.908397222 I0728 20:07:37.787176 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:07:37.787157497 +0000 UTC m=+351.950454507 I0728 20:07:37.797920 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:07:37.798154 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:07:37.79814914 +0000 UTC m=+351.961446130 I0728 20:07:37.812358 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:07:42.675645 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:07:42.675635715 +0000 UTC m=+356.838932695 I0728 20:08:22.779278 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-28 20:08:22.779226352 +0000 UTC m=+396.942523332 I0728 20:08:22.780104 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:08:22.780139 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 20:08:22.780133425 +0000 UTC m=+396.943430395 I0728 20:08:22.781114 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:08:22.781150 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 20:08:22.781142209 +0000 UTC m=+396.944439189 I0728 20:08:22.781431 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-28 20:08:22.781427733 +0000 UTC m=+396.944724713 I0728 20:08:22.781529 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:08:22.781542 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-28 20:08:22.781540105 +0000 UTC m=+396.944837085 I0728 20:08:22.781660 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 20:08:22.781656666 +0000 UTC m=+396.944953646 I0728 20:08:22.832545 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:22.832604 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:22.832632 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:08:22.832649 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 20:08:22.832644389 +0000 UTC m=+396.995941369 I0728 20:08:22.832902 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:08:22.832921 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-28 20:08:22.832918453 +0000 UTC m=+396.996215433 I0728 20:08:22.834386 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:22.834419 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:08:22.834429 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 20:08:22.834426714 +0000 UTC m=+396.997723684 I0728 20:08:23.021560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-28 20:08:23.021549919 +0000 UTC m=+397.184846889 I0728 20:08:23.036939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-28 20:08:23.03692746 +0000 UTC m=+397.200224450 I0728 20:08:23.090258 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:08:23.090248535 +0000 UTC m=+397.253545525 I0728 20:08:23.105012 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:23.190880 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:23.191120 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:23.192560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-28 20:08:23.192543722 +0000 UTC m=+397.355840702 I0728 20:08:23.192947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-28 20:08:23.192925177 +0000 UTC m=+397.356222157 I0728 20:08:23.206933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-28 20:08:23.206923878 +0000 UTC m=+397.370220858 I0728 20:08:23.213262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-28 20:08:23.213251489 +0000 UTC m=+397.376548479 I0728 20:08:23.712023 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:08:23.712003623 +0000 UTC m=+397.875300593 I0728 20:08:23.860909 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:08:23.860897238 +0000 UTC m=+398.024194218 I0728 20:08:23.955289 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:23.955944 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:08:23.955935971 +0000 UTC m=+398.119232961 I0728 20:08:24.003855 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:24.107026 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:24.107853 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:08:24.107843809 +0000 UTC m=+398.271140819 I0728 20:08:24.456641 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:24.556969 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:24.604719 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:30.706771 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:08:30.707056 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls" condition "Issuing" to 2026-07-28 20:08:30.707041813 +0000 UTC m=+404.870338803 I0728 20:08:30.707630 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls" condition "Ready" to 2026-07-28 20:08:30.707624251 +0000 UTC m=+404.870921241 I0728 20:08:30.716796 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:30.716905 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls" condition "Ready" to 2026-07-28 20:08:30.716892913 +0000 UTC m=+404.880189933 I0728 20:08:30.971063 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:31.000413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls-1" condition "Approved" to 2026-07-28 20:08:31.000401962 +0000 UTC m=+405.163698972 I0728 20:08:31.018400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls-1" condition "Ready" to 2026-07-28 20:08:31.018387339 +0000 UTC m=+405.181684309 I0728 20:08:31.050741 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:08:31.05072533 +0000 UTC m=+405.214022320 I0728 20:08:31.068077 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:31.109137 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f7mzs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:42.086400 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:08:42.086447 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-28 20:08:42.086423991 +0000 UTC m=+416.249720971 I0728 20:08:42.086788 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 20:08:42.086783916 +0000 UTC m=+416.250080896 I0728 20:08:42.102563 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:42.104014 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 20:08:42.10398577 +0000 UTC m=+416.267282760 I0728 20:08:42.422610 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:08:42.454509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-28 20:08:42.45449555 +0000 UTC m=+416.617792530 I0728 20:08:42.471272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-28 20:08:42.471259107 +0000 UTC m=+416.634556087 I0728 20:08:42.495891 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:08:42.495875097 +0000 UTC m=+416.659172077 I0728 20:08:42.507890 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:11:54.431144 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 20:11:54.431121277 +0000 UTC m=+608.594418267 I0728 20:11:54.431249 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:11:54.431393 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-28 20:11:54.43138816 +0000 UTC m=+608.594685150 I0728 20:11:54.443169 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:11:54.443271 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 20:11:54.44326222 +0000 UTC m=+608.606559210 I0728 20:11:54.810240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:11:54.856131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-28 20:11:54.856110079 +0000 UTC m=+609.019407059 I0728 20:11:54.876384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-28 20:11:54.8763657 +0000 UTC m=+609.039662710 I0728 20:11:54.901311 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:11:54.901299255 +0000 UTC m=+609.064596235 I0728 20:11:54.920113 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:12:38.839344 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-28 20:12:38.839325527 +0000 UTC m=+653.002622547 I0728 20:12:38.839910 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:12:38.839966 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 20:12:38.839958945 +0000 UTC m=+653.003255965 I0728 20:12:38.851638 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:12:38.851690 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:12:38.851818 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 20:12:38.851810393 +0000 UTC m=+653.015107383 I0728 20:12:38.975746 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:12:38.988231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-28 20:12:38.988216341 +0000 UTC m=+653.151513321 I0728 20:12:39.004242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-28 20:12:39.004231784 +0000 UTC m=+653.167528764 I0728 20:12:39.026708 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:12:39.026692534 +0000 UTC m=+653.189989524 I0728 20:12:39.037338 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"