I0714 08:33:48.248478 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0714 08:33:48.248694 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0714 08:33:48.254058 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0714 08:33:48.254118 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0714 08:33:48.254135 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0714 08:33:48.254755 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0714 08:33:48.254773 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0714 08:33:48.254813 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0714 08:33:48.260128 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0714 08:33:48.276639 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0714 08:33:48.283025 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0714 08:33:48.283051 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0714 08:33:48.283118 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0714 08:33:48.285941 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0714 08:33:48.288288 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0714 08:33:48.290387 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0714 08:33:48.290507 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0714 08:33:48.294064 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0714 08:33:48.298572 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0714 08:33:48.298759 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0714 08:33:48.301536 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0714 08:33:48.304757 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0714 08:33:48.306956 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0714 08:33:48.308937 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0714 08:33:48.313451 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0714 08:33:48.317663 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0714 08:33:48.321311 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0714 08:33:48.323377 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0714 08:33:48.325150 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0714 08:33:48.326877 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0714 08:33:48.326899 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0714 08:33:48.327016 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0714 08:33:48.328807 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0714 08:33:48.331250 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0714 08:33:48.335671 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:33:48.336906 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:33:48.337359 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:33:48.337558 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:33:48.337758 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:33:48.337776 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:33:48.356021 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:33:48.377667 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:33:48.390195 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:33:48.408955 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:33:48.428660 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 08:34:01.562049 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-14 08:34:01.562017216 +0000 UTC m=+13.341090192 I0714 08:34:02.261204 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:34:02.261224 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-14 08:34:02.261210757 +0000 UTC m=+14.040283773 I0714 08:34:02.261344 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 08:34:02.261334809 +0000 UTC m=+14.040407845 E0714 08:34:02.288335 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 08:34:02.288494 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-14 08:34:02.288483308 +0000 UTC m=+14.067556274 E0714 08:34:02.288563 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 08:34:02.288896 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:34:02.288970 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:34:02.289031 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 08:34:02.289019506 +0000 UTC m=+14.068092472 E0714 08:34:02.299096 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0714 08:34:02.299178 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 08:34:02.299197 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 08:34:02.299223 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0714 08:34:02.323109 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:34:02.333150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-14 08:34:02.33313563 +0000 UTC m=+14.112208596 I0714 08:34:02.356717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-14 08:34:02.356706654 +0000 UTC m=+14.135779590 I0714 08:34:02.377757 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:34:02.377721061 +0000 UTC m=+14.156794007 I0714 08:34:02.390649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:34:02.421489 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:34:07.300327 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:34:07.300313383 +0000 UTC m=+19.079386359 I0714 08:34:32.646208 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:34:32.646341 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 08:34:32.646333043 +0000 UTC m=+44.425405989 I0714 08:34:32.646584 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 08:34:32.646568476 +0000 UTC m=+44.425641422 I0714 08:34:32.654511 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-14 08:34:32.65450267 +0000 UTC m=+44.433575616 I0714 08:34:32.662902 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:34:32.662964 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 08:34:32.662957472 +0000 UTC m=+44.442030408 I0714 08:34:33.167397 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:34:33.199344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-14 08:34:33.199331681 +0000 UTC m=+44.978404617 I0714 08:34:33.323144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-14 08:34:33.323130218 +0000 UTC m=+45.102203204 I0714 08:34:33.401456 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:34:33.401439078 +0000 UTC m=+45.180512054 I0714 08:34:33.490502 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:34:33.491336 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:34:33.491323999 +0000 UTC m=+45.270396975 I0714 08:34:33.599875 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:34:33.636735 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:39:49.312682 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-171.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:39:49.312734 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Issuing" to 2026-07-14 08:39:49.312726601 +0000 UTC m=+361.091799547 I0714 08:39:49.313310 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready" to 2026-07-14 08:39:49.313304511 +0000 UTC m=+361.092377447 I0714 08:39:49.418520 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:39:49.418605 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready" to 2026-07-14 08:39:49.418595794 +0000 UTC m=+361.197668760 I0714 08:39:49.594937 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:39:49.629657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-171.nip.io-tls-1" condition "Approved" to 2026-07-14 08:39:49.629645759 +0000 UTC m=+361.408718695 I0714 08:39:49.716912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-171.nip.io-tls-1" condition "Ready" to 2026-07-14 08:39:49.71689843 +0000 UTC m=+361.495971406 I0714 08:39:49.744953 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:39:49.744944086 +0000 UTC m=+361.524017032 I0714 08:39:49.774420 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:39:49.775217 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:39:49.77520841 +0000 UTC m=+361.554281386 I0714 08:39:49.791638 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:40:57.514276 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-14 08:40:57.514235896 +0000 UTC m=+429.293308862 I0714 08:40:57.514892 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:40:57.514979 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 08:40:57.514968448 +0000 UTC m=+429.294041414 E0714 08:40:57.525227 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 08:40:57.525298 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-14 08:40:57.525291757 +0000 UTC m=+429.304364703 E0714 08:40:57.525314 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 08:40:57.529108 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:40:57.529178 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:40:57.529203 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 08:40:57.529195908 +0000 UTC m=+429.308268854 E0714 08:40:57.532896 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0714 08:40:57.533240 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 08:40:57.533464 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 08:40:57.533520 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0714 08:40:57.573988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-14 08:40:57.573968211 +0000 UTC m=+429.353041157 I0714 08:40:57.598774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-14 08:40:57.598759945 +0000 UTC m=+429.377832891 I0714 08:40:57.635008 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:40:57.634989816 +0000 UTC m=+429.414062792 I0714 08:40:57.651018 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:40:57.651752 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:40:57.651744005 +0000 UTC m=+429.430816941 I0714 08:40:57.661148 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:40:57.661416 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:40:57.661408075 +0000 UTC m=+429.440481011 I0714 08:41:02.533507 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:41:02.533491316 +0000 UTC m=+434.312564282 I0714 08:41:46.262859 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:41:46.262853 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-14 08:41:46.262808265 +0000 UTC m=+478.041881201 I0714 08:41:46.262887 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-14 08:41:46.262881026 +0000 UTC m=+478.041953962 I0714 08:41:46.268514 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:41:46.268537 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-14 08:41:46.268533209 +0000 UTC m=+478.047606145 I0714 08:41:46.268516 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 08:41:46.268505168 +0000 UTC m=+478.047578094 I0714 08:41:46.285175 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:41:46.285682 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-14 08:41:46.2856723 +0000 UTC m=+478.064745226 I0714 08:41:46.292119 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:46.297143 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:41:46.297196 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-14 08:41:46.297187319 +0000 UTC m=+478.076260265 I0714 08:41:46.296990 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-14 08:41:46.296979606 +0000 UTC m=+478.076052532 I0714 08:41:46.315527 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:46.315634 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 08:41:46.315624409 +0000 UTC m=+478.094697355 I0714 08:41:46.323730 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:46.324058 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:41:46.324081 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-14 08:41:46.324075072 +0000 UTC m=+478.103148008 I0714 08:41:46.516064 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:46.563485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-14 08:41:46.56347438 +0000 UTC m=+478.342547336 I0714 08:41:46.584426 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:46.585650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-14 08:41:46.585641054 +0000 UTC m=+478.364714010 I0714 08:41:46.594314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-14 08:41:46.594298711 +0000 UTC m=+478.373371687 I0714 08:41:46.626377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-14 08:41:46.62636325 +0000 UTC m=+478.405436196 I0714 08:41:46.635305 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:41:46.635292171 +0000 UTC m=+478.414365107 I0714 08:41:46.636318 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:46.666417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-14 08:41:46.666406837 +0000 UTC m=+478.445479763 I0714 08:41:46.669860 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:46.674193 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:41:46.674182181 +0000 UTC m=+478.453255127 I0714 08:41:46.711476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-14 08:41:46.711468086 +0000 UTC m=+478.490541022 I0714 08:41:46.858677 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:41:46.858667293 +0000 UTC m=+478.637740239 I0714 08:41:47.156336 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:47.354253 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:47.519649 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:41:47.519639708 +0000 UTC m=+479.298712644 I0714 08:41:47.696774 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:47.697437 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:41:47.697428099 +0000 UTC m=+479.476501045 I0714 08:41:48.056749 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:48.104598 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:57.364307 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls" condition "Ready" to 2026-07-14 08:41:57.364279485 +0000 UTC m=+489.143352451 I0714 08:41:57.364777 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:41:57.364803 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls" condition "Issuing" to 2026-07-14 08:41:57.364797042 +0000 UTC m=+489.143870018 I0714 08:41:57.929082 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:41:57.929208 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:41:57.929238 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls" condition "Issuing" to 2026-07-14 08:41:57.929228177 +0000 UTC m=+489.708301143 I0714 08:41:59.266273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls-1" condition "Approved" to 2026-07-14 08:41:59.266258236 +0000 UTC m=+491.045331192 I0714 08:41:59.287387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls-1" condition "Ready" to 2026-07-14 08:41:59.287377192 +0000 UTC m=+491.066450118 I0714 08:41:59.325309 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:41:59.32529654 +0000 UTC m=+491.104369476 I0714 08:41:59.338114 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hh5vv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:42:21.802113 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-14 08:42:21.8020789 +0000 UTC m=+513.581151866 I0714 08:42:21.802298 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:42:21.802327 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-14 08:42:21.802320754 +0000 UTC m=+513.581393730 I0714 08:42:21.814100 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:42:21.814214 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-14 08:42:21.814208413 +0000 UTC m=+513.593281359 I0714 08:42:22.111677 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:42:22.140291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-14 08:42:22.140280369 +0000 UTC m=+513.919353305 I0714 08:42:22.156138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-14 08:42:22.156130774 +0000 UTC m=+513.935203710 I0714 08:42:22.177933 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:42:22.177923653 +0000 UTC m=+513.956996599 I0714 08:42:22.188685 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:42:22.189054 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:42:22.189050241 +0000 UTC m=+513.968123177 I0714 08:42:22.201524 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:45:45.097311 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:45:45.097414 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-14 08:45:45.097398425 +0000 UTC m=+716.876471451 I0714 08:45:45.097522 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-14 08:45:45.097514509 +0000 UTC m=+716.876587445 I0714 08:45:45.107337 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:45:45.107426 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:45:45.107451 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-14 08:45:45.107444465 +0000 UTC m=+716.886517411 I0714 08:45:45.339916 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:45:45.359216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-14 08:45:45.359205137 +0000 UTC m=+717.138278083 I0714 08:45:45.379829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-14 08:45:45.379817443 +0000 UTC m=+717.158890379 I0714 08:45:45.405689 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:45:45.405676789 +0000 UTC m=+717.184749735 I0714 08:45:45.419741 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:45:45.420358 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:45:45.42035085 +0000 UTC m=+717.199423796 I0714 08:45:45.432694 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:46:34.444829 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-14 08:46:34.444806381 +0000 UTC m=+766.223879327 I0714 08:46:34.444846 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 08:46:34.445082 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-14 08:46:34.445072899 +0000 UTC m=+766.224145865 I0714 08:46:34.459415 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:46:34.459482 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-14 08:46:34.459474864 +0000 UTC m=+766.238547810 I0714 08:46:34.640955 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:46:34.735777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-14 08:46:34.735765861 +0000 UTC m=+766.514838807 I0714 08:46:34.784081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-14 08:46:34.784070257 +0000 UTC m=+766.563143203 I0714 08:46:34.868169 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:46:34.868155768 +0000 UTC m=+766.647228714 I0714 08:46:34.921322 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 08:46:34.921909 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 08:46:34.921901298 +0000 UTC m=+766.700974244 I0714 08:46:34.966845 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"