I0702 16:24:07.791332 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0702 16:24:07.791627 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0702 16:24:07.791772 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0702 16:24:07.796281 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0702 16:24:07.796769 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0702 16:24:07.796887 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0702 16:24:07.796944 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0702 16:24:07.799504 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0702 16:24:07.814403 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0702 16:24:07.819521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0702 16:24:07.826934 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0702 16:24:07.826975 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0702 16:24:07.826989 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0702 16:24:07.831352 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0702 16:24:07.831441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0702 16:24:07.834190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0702 16:24:07.836530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0702 16:24:07.839030 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0702 16:24:07.841812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0702 16:24:07.849331 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0702 16:24:07.852325 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0702 16:24:07.852345 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0702 16:24:07.852473 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0702 16:24:07.854569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0702 16:24:07.856708 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0702 16:24:07.858649 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0702 16:24:07.858676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0702 16:24:07.860929 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0702 16:24:07.862771 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0702 16:24:07.864522 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0702 16:24:07.871337 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0702 16:24:07.874248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0702 16:24:07.876705 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0702 16:24:07.880098 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 16:24:07.880530 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 16:24:07.881280 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 16:24:07.902605 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 16:24:07.913271 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 16:24:07.928798 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 16:24:07.952589 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 16:24:07.970158 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 16:24:07.982311 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 16:24:07.987311 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 16:24:20.609276 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 16:24:20.609248134 +0000 UTC m=+12.858189829 I0702 16:24:21.417887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:24:21.417875 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 16:24:21.417835852 +0000 UTC m=+13.666777577 I0702 16:24:21.417964 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 16:24:21.417952634 +0000 UTC m=+13.666894349 I0702 16:24:21.431625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:24:21.431778 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 16:24:21.431770179 +0000 UTC m=+13.680711874 E0702 16:24:21.437547 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 16:24:21.437656 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 16:24:21.437644015 +0000 UTC m=+13.686585730 E0702 16:24:21.437698 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 16:24:21.450993 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0702 16:24:21.451196 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 16:24:21.451260 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 16:24:21.451493 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0702 16:24:21.455367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:24:21.481092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7q6zt" condition "Approved" to 2026-07-02 16:24:21.481070398 +0000 UTC m=+13.730012133 I0702 16:24:21.493258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7q6zt" condition "Ready" to 2026-07-02 16:24:21.493244019 +0000 UTC m=+13.742185714 I0702 16:24:21.517038 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:24:21.517024281 +0000 UTC m=+13.765965976 I0702 16:24:21.541969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:24:26.451650 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:24:26.451633985 +0000 UTC m=+18.700575710 I0702 16:24:49.508331 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 16:24:49.508300728 +0000 UTC m=+41.757242413 I0702 16:24:49.508585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:24:49.508918 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 16:24:49.508909006 +0000 UTC m=+41.757850741 I0702 16:24:49.524860 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 16:24:49.524839954 +0000 UTC m=+41.773781659 I0702 16:24:49.551311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:24:49.551425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:24:49.551453 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 16:24:49.551446062 +0000 UTC m=+41.800387747 I0702 16:24:49.867461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:24:49.868385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9nxsp" condition "Approved" to 2026-07-02 16:24:49.868376194 +0000 UTC m=+42.117317889 I0702 16:24:49.909767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9nxsp" condition "Ready" to 2026-07-02 16:24:49.909748633 +0000 UTC m=+42.158690318 I0702 16:24:49.950352 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:24:49.950339894 +0000 UTC m=+42.199281579 I0702 16:24:49.982235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:29:19.345763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-49.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:29:19.345811 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Issuing" to 2026-07-02 16:29:19.345799925 +0000 UTC m=+311.594741620 I0702 16:29:19.345814 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready" to 2026-07-02 16:29:19.345764825 +0000 UTC m=+311.594706550 I0702 16:29:19.369843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:29:19.370014 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready" to 2026-07-02 16:29:19.37000273 +0000 UTC m=+311.618944445 I0702 16:29:19.590428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:29:19.619587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-49.nip.io-tls-bxvgx" condition "Approved" to 2026-07-02 16:29:19.619568596 +0000 UTC m=+311.868510281 I0702 16:29:19.648320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-49.nip.io-tls-bxvgx" condition "Ready" to 2026-07-02 16:29:19.648303925 +0000 UTC m=+311.897245630 I0702 16:29:19.676668 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:29:19.676655367 +0000 UTC m=+311.925597062 I0702 16:29:19.699243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:30:27.968376 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 16:30:27.968328959 +0000 UTC m=+380.217270654 I0702 16:30:27.968627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:30:27.968683 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 16:30:27.968672154 +0000 UTC m=+380.217613849 E0702 16:30:27.983401 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 16:30:27.983436 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 16:30:27.983429689 +0000 UTC m=+380.232371384 E0702 16:30:27.983480 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 16:30:27.985243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:30:27.985322 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:30:27.985348 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 16:30:27.98533955 +0000 UTC m=+380.234281245 E0702 16:30:27.997878 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0702 16:30:27.998337 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 16:30:27.998372 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 16:30:27.998477 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0702 16:30:28.033550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qc4rq" condition "Approved" to 2026-07-02 16:30:28.033535148 +0000 UTC m=+380.282476843 I0702 16:30:28.045676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qc4rq" condition "Ready" to 2026-07-02 16:30:28.045661312 +0000 UTC m=+380.294603007 I0702 16:30:28.069983 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:30:28.069964958 +0000 UTC m=+380.318906653 I0702 16:30:28.093973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:30:28.094988 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:30:28.094975617 +0000 UTC m=+380.343917342 I0702 16:30:28.110582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:30:28.110810 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:30:28.110799849 +0000 UTC m=+380.359741544 I0702 16:30:32.998900 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:30:32.998879909 +0000 UTC m=+385.247821625 I0702 16:31:17.765536 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 16:31:17.76548618 +0000 UTC m=+430.014427865 I0702 16:31:17.766560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:31:17.766804 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 16:31:17.76679025 +0000 UTC m=+430.015731985 I0702 16:31:17.776354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:31:17.776404 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 16:31:17.776393632 +0000 UTC m=+430.025335337 I0702 16:31:17.777101 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 16:31:17.777094502 +0000 UTC m=+430.026036197 I0702 16:31:17.778288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:31:17.778317 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 16:31:17.778311681 +0000 UTC m=+430.027253376 I0702 16:31:17.778718 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 16:31:17.778610785 +0000 UTC m=+430.027552480 I0702 16:31:17.826875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:17.828254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:31:17.828314 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 16:31:17.828288912 +0000 UTC m=+430.077230587 I0702 16:31:17.828861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:17.828986 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 16:31:17.828972972 +0000 UTC m=+430.077914657 I0702 16:31:17.830672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:17.830911 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 16:31:17.830898829 +0000 UTC m=+430.079840544 I0702 16:31:17.951067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:17.978170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cxrww" condition "Approved" to 2026-07-02 16:31:17.978153772 +0000 UTC m=+430.227095477 I0702 16:31:18.038392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cxrww" condition "Ready" to 2026-07-02 16:31:18.038377655 +0000 UTC m=+430.287319350 I0702 16:31:18.052753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4hrdh" condition "Approved" to 2026-07-02 16:31:18.052737237 +0000 UTC m=+430.301678932 I0702 16:31:18.076080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4hrdh" condition "Ready" to 2026-07-02 16:31:18.076068112 +0000 UTC m=+430.325009787 I0702 16:31:18.084931 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:31:18.084910953 +0000 UTC m=+430.333852638 I0702 16:31:18.114878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:18.115291 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:31:18.115284753 +0000 UTC m=+430.364226438 I0702 16:31:18.120217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:18.120807 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:31:18.120791364 +0000 UTC m=+430.369733049 I0702 16:31:18.140285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:18.192540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:18.192833 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:31:18.192826211 +0000 UTC m=+430.441767896 I0702 16:31:18.547777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:18.593579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:18.642724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:18.849794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wqb5j" condition "Approved" to 2026-07-02 16:31:18.849775205 +0000 UTC m=+431.098716930 I0702 16:31:18.960026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wqb5j" condition "Ready" to 2026-07-02 16:31:18.960013957 +0000 UTC m=+431.208955642 I0702 16:31:19.396385 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:31:19.396367559 +0000 UTC m=+431.645309254 I0702 16:31:19.495482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:27.099179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:31:27.099235 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls" condition "Issuing" to 2026-07-02 16:31:27.099222489 +0000 UTC m=+439.348164214 I0702 16:31:27.099499 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls" condition "Ready" to 2026-07-02 16:31:27.099474203 +0000 UTC m=+439.348415898 I0702 16:31:27.115312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:27.115389 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls" condition "Ready" to 2026-07-02 16:31:27.115379286 +0000 UTC m=+439.364320981 I0702 16:31:27.264562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:27.301796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s6mfg-vzl4s" condition "Approved" to 2026-07-02 16:31:27.301774365 +0000 UTC m=+439.550716060 I0702 16:31:27.325882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s6mfg-vzl4s" condition "Ready" to 2026-07-02 16:31:27.325864788 +0000 UTC m=+439.574806483 I0702 16:31:27.354727 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:31:27.35470473 +0000 UTC m=+439.603646425 I0702 16:31:27.380715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s6mfg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:41.141983 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 16:31:41.14196101 +0000 UTC m=+453.390902705 I0702 16:31:41.142505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:31:41.142525 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 16:31:41.142521638 +0000 UTC m=+453.391463333 I0702 16:31:41.172262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:41.172504 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 16:31:41.17249492 +0000 UTC m=+453.421436635 I0702 16:31:41.329286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:41.373255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zgf2p" condition "Approved" to 2026-07-02 16:31:41.373232824 +0000 UTC m=+453.622174519 I0702 16:31:41.393721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zgf2p" condition "Ready" to 2026-07-02 16:31:41.39370311 +0000 UTC m=+453.642644795 I0702 16:31:41.430223 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:31:41.430203176 +0000 UTC m=+453.679144861 I0702 16:31:41.449529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:31:41.529452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:35:06.679048 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:35:06.679088 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 16:35:06.679079384 +0000 UTC m=+658.928021069 I0702 16:35:06.679245 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 16:35:06.679231026 +0000 UTC m=+658.928172711 I0702 16:35:06.758078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:35:06.758194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:35:06.758230 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 16:35:06.758223701 +0000 UTC m=+659.007165376 I0702 16:35:06.891220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:35:06.900597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bnzc8" condition "Approved" to 2026-07-02 16:35:06.900584802 +0000 UTC m=+659.149526487 I0702 16:35:06.917530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bnzc8" condition "Ready" to 2026-07-02 16:35:06.917518039 +0000 UTC m=+659.166459724 I0702 16:35:06.948147 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:35:06.948134143 +0000 UTC m=+659.197075828 I0702 16:35:06.973780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:35:06.974124 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:35:06.974117527 +0000 UTC m=+659.223059212 I0702 16:35:06.994096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:35:50.917247 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:35:50.917300 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 16:35:50.917293544 +0000 UTC m=+703.166235239 I0702 16:35:50.917686 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 16:35:50.917681135 +0000 UTC m=+703.166622830 I0702 16:35:50.937836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:35:50.938080 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 16:35:50.93806411 +0000 UTC m=+703.187005835 I0702 16:35:51.347717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:35:51.376534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7rlg7" condition "Approved" to 2026-07-02 16:35:51.376521634 +0000 UTC m=+703.625463329 I0702 16:35:51.400972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7rlg7" condition "Ready" to 2026-07-02 16:35:51.400963446 +0000 UTC m=+703.649905121 I0702 16:35:51.432387 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:35:51.432376783 +0000 UTC m=+703.681318478 I0702 16:35:51.471967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:35:51.530662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"