I0709 23:45:35.423916 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0709 23:45:35.424056 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0709 23:45:35.424260 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0709 23:45:35.431659 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0709 23:45:35.432173 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0709 23:45:35.432243 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0709 23:45:35.432373 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0709 23:45:35.436444 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0709 23:45:35.450944 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0709 23:45:35.456423 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0709 23:45:35.461281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0709 23:45:35.464464 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0709 23:45:35.464499 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0709 23:45:35.466853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0709 23:45:35.468664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0709 23:45:35.470373 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0709 23:45:35.472190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0709 23:45:35.474152 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0709 23:45:35.475709 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0709 23:45:35.475751 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0709 23:45:35.482028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0709 23:45:35.484614 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0709 23:45:35.484638 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0709 23:45:35.484734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0709 23:45:35.486996 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0709 23:45:35.487043 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0709 23:45:35.489441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0709 23:45:35.491371 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0709 23:45:35.491498 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0709 23:45:35.493369 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0709 23:45:35.495283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0709 23:45:35.497893 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0709 23:45:35.503654 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0709 23:45:35.507409 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 23:45:35.507673 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 23:45:35.507762 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 23:45:35.521369 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 23:45:35.538099 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 23:45:35.557202 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 23:45:35.567909 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 23:45:35.580738 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 23:45:35.585877 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 23:45:35.606968 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0709 23:45:47.541514 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-09 23:45:47.541478456 +0000 UTC m=+12.147783201 I0709 23:45:48.225631 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-09 23:45:48.225615157 +0000 UTC m=+12.831919912 I0709 23:45:48.226073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:45:48.226154 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-09 23:45:48.22614617 +0000 UTC m=+12.832450905 I0709 23:45:48.248400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:45:48.248546 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:45:48.248701 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-09 23:45:48.248688801 +0000 UTC m=+12.854993576 E0709 23:45:48.293105 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 23:45:48.293208 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-09 23:45:48.293194459 +0000 UTC m=+12.899499204 E0709 23:45:48.293332 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 23:45:48.305309 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0709 23:45:48.306257 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 23:45:48.306429 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 23:45:48.306535 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0709 23:45:48.325276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-t64vs" condition "Approved" to 2026-07-09 23:45:48.325254025 +0000 UTC m=+12.931558780 I0709 23:45:48.340552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-t64vs" condition "Ready" to 2026-07-09 23:45:48.340538845 +0000 UTC m=+12.946843560 I0709 23:45:48.360930 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:45:48.360918125 +0000 UTC m=+12.967222860 I0709 23:45:48.377816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:45:48.378136 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:45:48.378124851 +0000 UTC m=+12.984429576 I0709 23:45:48.404467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:45:53.305773 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:45:53.305758387 +0000 UTC m=+17.912063112 I0709 23:46:14.619379 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-09 23:46:14.619362959 +0000 UTC m=+39.225667684 I0709 23:46:14.620530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:46:14.622602 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-09 23:46:14.622590809 +0000 UTC m=+39.228895574 I0709 23:46:14.628382 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-09 23:46:14.628376647 +0000 UTC m=+39.234681362 I0709 23:46:14.651969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:46:14.652078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:46:14.652097 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-09 23:46:14.652090783 +0000 UTC m=+39.258395508 I0709 23:46:14.967835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s57m6" condition "Approved" to 2026-07-09 23:46:14.967823593 +0000 UTC m=+39.574128318 I0709 23:46:14.998983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s57m6" condition "Ready" to 2026-07-09 23:46:14.998970758 +0000 UTC m=+39.605275483 I0709 23:46:15.033663 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:46:15.033647535 +0000 UTC m=+39.639952260 I0709 23:46:15.060900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:46:15.124660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:50:11.373640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:50:11.373643 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-07-09 23:50:11.373597889 +0000 UTC m=+275.979902644 I0709 23:50:11.373681 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Issuing" to 2026-07-09 23:50:11.37367299 +0000 UTC m=+275.979977725 I0709 23:50:11.394399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:50:11.394460 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-07-09 23:50:11.394453649 +0000 UTC m=+276.000758374 I0709 23:50:11.522463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:50:11.548943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-59z7v" condition "Approved" to 2026-07-09 23:50:11.548929 +0000 UTC m=+276.155233755 I0709 23:50:11.573521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-59z7v" condition "Ready" to 2026-07-09 23:50:11.573510175 +0000 UTC m=+276.179814910 I0709 23:50:11.603129 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:50:11.603120952 +0000 UTC m=+276.209425677 I0709 23:50:11.628643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:50:11.628968 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:50:11.628961512 +0000 UTC m=+276.235266237 I0709 23:50:11.637177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:50:11.650755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:50:11.651061 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:50:11.651053017 +0000 UTC m=+276.257357752 I0709 23:51:14.126068 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-09 23:51:14.12604229 +0000 UTC m=+338.732347015 I0709 23:51:14.126126 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:51:14.126378 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-09 23:51:14.126364776 +0000 UTC m=+338.732669541 E0709 23:51:14.138122 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 23:51:14.138197 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-09 23:51:14.138188813 +0000 UTC m=+338.744493548 E0709 23:51:14.138417 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 23:51:14.139121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:14.139192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:51:14.139229 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-09 23:51:14.139224581 +0000 UTC m=+338.745529296 E0709 23:51:14.146043 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0709 23:51:14.146377 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 23:51:14.146424 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 23:51:14.146480 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0709 23:51:14.177522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-g5zgk" condition "Approved" to 2026-07-09 23:51:14.177504868 +0000 UTC m=+338.783809623 I0709 23:51:14.193928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-g5zgk" condition "Ready" to 2026-07-09 23:51:14.193919702 +0000 UTC m=+338.800224417 I0709 23:51:14.213732 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:51:14.213717022 +0000 UTC m=+338.820021747 I0709 23:51:14.237047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:19.146567 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:51:19.146553414 +0000 UTC m=+343.752858159 I0709 23:51:58.328195 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:51:58.328235 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-09 23:51:58.328227851 +0000 UTC m=+382.934532566 I0709 23:51:58.328376 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-09 23:51:58.328367183 +0000 UTC m=+382.934671898 I0709 23:51:58.359249 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-09 23:51:58.359239699 +0000 UTC m=+382.965544414 I0709 23:51:58.364835 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:51:58.364860 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-09 23:51:58.364857014 +0000 UTC m=+382.971161729 I0709 23:51:58.375184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:51:58.375380 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-09 23:51:58.375367163 +0000 UTC m=+382.981671918 I0709 23:51:58.375536 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-09 23:51:58.375517345 +0000 UTC m=+382.981822100 I0709 23:51:58.401872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:58.401937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:51:58.401956 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-09 23:51:58.401950673 +0000 UTC m=+383.008255388 I0709 23:51:58.405962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:58.406026 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-09 23:51:58.406020795 +0000 UTC m=+383.012325510 I0709 23:51:58.406331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:58.406361 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-09 23:51:58.40635887 +0000 UTC m=+383.012663575 I0709 23:51:58.502831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:58.531201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dj4dq" condition "Approved" to 2026-07-09 23:51:58.531182793 +0000 UTC m=+383.137487538 I0709 23:51:58.545832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dj4dq" condition "Ready" to 2026-07-09 23:51:58.545823374 +0000 UTC m=+383.152128079 I0709 23:51:58.581371 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:51:58.581355881 +0000 UTC m=+383.187660596 I0709 23:51:58.598240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:58.598435 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:51:58.598429439 +0000 UTC m=+383.204734154 I0709 23:51:58.630903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:58.659880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cz56x" condition "Approved" to 2026-07-09 23:51:58.659866236 +0000 UTC m=+383.266170961 I0709 23:51:58.661043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:58.692024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cz56x" condition "Ready" to 2026-07-09 23:51:58.692014711 +0000 UTC m=+383.298319426 I0709 23:51:58.778517 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:51:58.778505146 +0000 UTC m=+383.384809861 I0709 23:51:58.882279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:58.882606 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:51:58.882600967 +0000 UTC m=+383.488905682 I0709 23:51:59.081918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:51:59.382367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7pch7" condition "Approved" to 2026-07-09 23:51:59.382353748 +0000 UTC m=+383.988658473 I0709 23:51:59.582600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7pch7" condition "Ready" to 2026-07-09 23:51:59.582590433 +0000 UTC m=+384.188895158 I0709 23:51:59.921686 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-7pch7" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-qkbfm" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0709 23:52:00.127043 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-qkbfm\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0709 23:52:00.174638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8wqqk" condition "Approved" to 2026-07-09 23:52:00.174625525 +0000 UTC m=+384.780930240 I0709 23:52:00.232574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8wqqk" condition "Ready" to 2026-07-09 23:52:00.232563806 +0000 UTC m=+384.838868531 I0709 23:52:00.724107 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:52:00.724093744 +0000 UTC m=+385.330398489 I0709 23:52:00.823965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:52:00.824389 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:52:00.824381842 +0000 UTC m=+385.430686567 I0709 23:52:01.072449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:52:01.122525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:52:07.469459 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:52:07.469489 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" condition "Issuing" to 2026-07-09 23:52:07.469482429 +0000 UTC m=+392.075787154 I0709 23:52:07.469880 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" condition "Ready" to 2026-07-09 23:52:07.469875415 +0000 UTC m=+392.076180130 I0709 23:52:07.482759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dx25q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:52:07.483001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:52:07.483080 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" condition "Issuing" to 2026-07-09 23:52:07.48303378 +0000 UTC m=+392.089338535 I0709 23:52:07.975880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dx25q-k486f" condition "Approved" to 2026-07-09 23:52:07.975867909 +0000 UTC m=+392.582172614 I0709 23:52:07.994722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dx25q-k486f" condition "Ready" to 2026-07-09 23:52:07.994716437 +0000 UTC m=+392.601021152 I0709 23:52:08.020596 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:52:08.020585812 +0000 UTC m=+392.626890537 I0709 23:52:08.036138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dx25q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:52:08.036844 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:52:08.036839351 +0000 UTC m=+392.643144066 I0709 23:52:08.042524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dx25q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:52:08.062082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx25q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dx25q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:52:20.779551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:52:20.779578 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-09 23:52:20.779571757 +0000 UTC m=+405.385876472 I0709 23:52:20.779646 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-09 23:52:20.779628348 +0000 UTC m=+405.385933093 I0709 23:52:20.802374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:52:20.802423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:52:20.802434 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-09 23:52:20.802429588 +0000 UTC m=+405.408734303 I0709 23:52:20.963444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:52:20.974171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pcrmn" condition "Approved" to 2026-07-09 23:52:20.974157006 +0000 UTC m=+405.580461731 I0709 23:52:20.996423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pcrmn" condition "Ready" to 2026-07-09 23:52:20.996413238 +0000 UTC m=+405.602717963 I0709 23:52:21.039071 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:52:21.039052025 +0000 UTC m=+405.645356770 I0709 23:52:21.062903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:52:21.063187 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:52:21.063179863 +0000 UTC m=+405.669484588 I0709 23:52:21.083980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:55:25.826518 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-09 23:55:25.826485837 +0000 UTC m=+590.432790562 I0709 23:55:25.826550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:55:25.826701 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-09 23:55:25.82669141 +0000 UTC m=+590.432996155 I0709 23:55:25.845718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:55:25.845806 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-09 23:55:25.845799348 +0000 UTC m=+590.452104073 I0709 23:55:26.024741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:55:26.056840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mdpvn" condition "Approved" to 2026-07-09 23:55:26.056830742 +0000 UTC m=+590.663135467 I0709 23:55:26.070852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mdpvn" condition "Ready" to 2026-07-09 23:55:26.07084426 +0000 UTC m=+590.677148985 I0709 23:55:26.095856 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:55:26.09584172 +0000 UTC m=+590.702146435 I0709 23:55:26.117316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:56:03.155027 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-09 23:56:03.155015211 +0000 UTC m=+627.761319936 I0709 23:56:03.155450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:56:03.155511 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-09 23:56:03.155505847 +0000 UTC m=+627.761810582 I0709 23:56:03.175065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:56:03.175177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 23:56:03.175236 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-09 23:56:03.17523047 +0000 UTC m=+627.781535195 I0709 23:56:03.551137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:56:03.560575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jcx9v" condition "Approved" to 2026-07-09 23:56:03.560567271 +0000 UTC m=+628.166871976 I0709 23:56:03.576917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jcx9v" condition "Ready" to 2026-07-09 23:56:03.576907584 +0000 UTC m=+628.183212329 I0709 23:56:03.608407 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 23:56:03.608396286 +0000 UTC m=+628.214701001 I0709 23:56:03.640522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 23:56:03.690282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"