I0709 15:26:50.030590 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0709 15:26:50.030873 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0709 15:26:50.034972 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0709 15:26:50.035038 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0709 15:26:50.035064 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0709 15:26:50.035516 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0709 15:26:50.035496 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0709 15:26:50.035539 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0709 15:26:50.042892 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0709 15:26:50.063213 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0709 15:26:50.063781 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0709 15:26:50.063886 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0709 15:26:50.069473 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0709 15:26:50.073343 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0709 15:26:50.078771 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0709 15:26:50.078915 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0709 15:26:50.082938 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0709 15:26:50.085839 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0709 15:26:50.088444 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0709 15:26:50.091021 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0709 15:26:50.091072 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0709 15:26:50.094641 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0709 15:26:50.099027 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0709 15:26:50.101794 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0709 15:26:50.104411 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0709 15:26:50.107020 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0709 15:26:50.110002 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0709 15:26:50.110051 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0709 15:26:50.110106 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0709 15:26:50.112206 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0709 15:26:50.114465 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0709 15:26:50.118845 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0709 15:26:50.122907 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0709 15:26:50.125482 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0709 15:26:50.133272 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:26:50.133293 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:26:50.133353 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:26:50.133784 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:26:50.134434 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:26:50.135698 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:26:50.148514 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:26:50.170106 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:26:50.181837 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:26:50.203847 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:26:50.227393 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0709 15:27:05.361200 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-09 15:27:05.361175547 +0000 UTC m=+15.362002580 I0709 15:27:06.131498 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-09 15:27:06.131481391 +0000 UTC m=+16.132308424 I0709 15:27:06.131708 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:27:06.131771 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-09 15:27:06.131759765 +0000 UTC m=+16.132586818 E0709 15:27:06.194098 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 15:27:06.194301 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-09 15:27:06.194288714 +0000 UTC m=+16.195115777 E0709 15:27:06.194366 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 15:27:06.195087 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:27:06.195181 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:27:06.195216 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-09 15:27:06.19520707 +0000 UTC m=+16.196034103 E0709 15:27:06.245574 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0709 15:27:06.246509 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 15:27:06.246827 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 15:27:06.247152 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0709 15:27:06.366891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-09 15:27:06.366875542 +0000 UTC m=+16.367702595 I0709 15:27:06.408512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-09 15:27:06.408499544 +0000 UTC m=+16.409326577 I0709 15:27:06.534793 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:27:06.534782672 +0000 UTC m=+16.535609695 I0709 15:27:06.695149 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:27:11.246821 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:27:11.246805947 +0000 UTC m=+21.247632980 I0709 15:27:43.322751 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:27:43.322768 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-09 15:27:43.32272517 +0000 UTC m=+53.323552203 I0709 15:27:43.322837 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-09 15:27:43.322827241 +0000 UTC m=+53.323654274 I0709 15:27:43.389034 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:27:43.389809 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-09 15:27:43.389796772 +0000 UTC m=+53.390623825 I0709 15:27:43.390502 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-09 15:27:43.390493261 +0000 UTC m=+53.391320314 I0709 15:27:43.921134 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:27:44.203196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-09 15:27:44.203179717 +0000 UTC m=+54.204006780 I0709 15:27:44.286623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-09 15:27:44.286601194 +0000 UTC m=+54.287428247 I0709 15:27:44.485796 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:27:44.48578172 +0000 UTC m=+54.486608753 I0709 15:27:44.566053 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:27:44.566769 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:27:44.566760204 +0000 UTC m=+54.567587237 I0709 15:27:44.975763 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:34:51.242916 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-07-09 15:34:51.242854005 +0000 UTC m=+481.243681068 I0709 15:34:51.243432 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:34:51.243479 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Issuing" to 2026-07-09 15:34:51.243474635 +0000 UTC m=+481.244301658 I0709 15:34:51.294183 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:34:51.294351 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-07-09 15:34:51.294338196 +0000 UTC m=+481.295165249 I0709 15:34:51.611366 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:34:51.708504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-1" condition "Approved" to 2026-07-09 15:34:51.708479622 +0000 UTC m=+481.709306685 I0709 15:34:51.737689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-1" condition "Ready" to 2026-07-09 15:34:51.737673036 +0000 UTC m=+481.738500069 I0709 15:34:51.793038 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:34:51.793017501 +0000 UTC m=+481.793844524 I0709 15:34:51.823372 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:34:51.824302 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:34:51.824291675 +0000 UTC m=+481.825118708 I0709 15:34:51.878649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:34:51.878646 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:36:04.069882 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:36:04.069908 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-09 15:36:04.069895708 +0000 UTC m=+554.070722741 I0709 15:36:04.069954 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-09 15:36:04.069944029 +0000 UTC m=+554.070771072 I0709 15:36:04.263015 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:36:04.263095 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:36:04.263147 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-09 15:36:04.263140154 +0000 UTC m=+554.263967177 E0709 15:36:04.313184 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0709 15:36:04.313506 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-09 15:36:04.31349803 +0000 UTC m=+554.314325053 E0709 15:36:04.313566 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 15:36:04.516220 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0709 15:36:04.516337 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 15:36:04.516397 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0709 15:36:04.516570 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0709 15:36:05.307176 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:36:05.308732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-09 15:36:05.308723403 +0000 UTC m=+555.309550426 I0709 15:36:05.336839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-09 15:36:05.33682615 +0000 UTC m=+555.337653183 I0709 15:36:05.355175 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:36:05.355161986 +0000 UTC m=+555.355989019 I0709 15:36:05.387246 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:36:05.387795 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:36:05.387784904 +0000 UTC m=+555.388611947 I0709 15:36:05.393779 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:36:05.402391 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:36:09.517475 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:36:09.517460978 +0000 UTC m=+559.518288041 I0709 15:37:06.028839 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-09 15:37:06.028821029 +0000 UTC m=+616.029648072 I0709 15:37:06.029275 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:37:06.029298 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-09 15:37:06.029294445 +0000 UTC m=+616.030121488 I0709 15:37:06.031467 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:37:06.031492 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-09 15:37:06.031487934 +0000 UTC m=+616.032314967 I0709 15:37:06.031789 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-09 15:37:06.031776978 +0000 UTC m=+616.032603991 I0709 15:37:06.050540 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-09 15:37:06.050530713 +0000 UTC m=+616.051357736 I0709 15:37:06.051023 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:37:06.051060 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-09 15:37:06.051053529 +0000 UTC m=+616.051880552 I0709 15:37:06.068022 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:06.069183 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-09 15:37:06.069163535 +0000 UTC m=+616.069990628 I0709 15:37:06.070133 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:06.071131 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-09 15:37:06.071121431 +0000 UTC m=+616.071948474 I0709 15:37:06.100592 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:06.100935 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:37:06.100984 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-09 15:37:06.100975791 +0000 UTC m=+616.101802824 I0709 15:37:06.277417 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:06.310551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-09 15:37:06.310540486 +0000 UTC m=+616.311367499 I0709 15:37:06.335507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-09 15:37:06.335497311 +0000 UTC m=+616.336324334 I0709 15:37:06.364482 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:37:06.3644689 +0000 UTC m=+616.365295923 I0709 15:37:06.386951 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:06.387477 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:37:06.38747162 +0000 UTC m=+616.388298643 I0709 15:37:06.411219 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:06.418204 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:06.424700 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:06.454007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-09 15:37:06.453988279 +0000 UTC m=+616.454815312 I0709 15:37:06.462697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-09 15:37:06.462682972 +0000 UTC m=+616.463510005 I0709 15:37:06.472936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-09 15:37:06.472921636 +0000 UTC m=+616.473748679 I0709 15:37:06.527583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-09 15:37:06.527574379 +0000 UTC m=+616.528401402 I0709 15:37:07.129417 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:37:07.129388422 +0000 UTC m=+617.130215485 I0709 15:37:07.188715 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:37:07.188700186 +0000 UTC m=+617.189527279 I0709 15:37:07.326546 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:07.424927 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:07.425919 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:37:07.425910611 +0000 UTC m=+617.426737634 I0709 15:37:07.772852 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:07.822031 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:08.074116 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:39.632187 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" condition "Ready" to 2026-07-09 15:37:39.632168573 +0000 UTC m=+649.632995636 I0709 15:37:39.632564 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:37:39.634728 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" condition "Issuing" to 2026-07-09 15:37:39.632605149 +0000 UTC m=+649.633432212 I0709 15:37:39.709574 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:39.709669 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:37:39.709697 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" condition "Issuing" to 2026-07-09 15:37:39.709690904 +0000 UTC m=+649.710517917 I0709 15:37:40.423971 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:40.424655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls-1" condition "Approved" to 2026-07-09 15:37:40.424644625 +0000 UTC m=+650.425471668 I0709 15:37:40.497213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls-1" condition "Ready" to 2026-07-09 15:37:40.497202742 +0000 UTC m=+650.498029775 I0709 15:37:40.911694 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:37:40.911677103 +0000 UTC m=+650.912504136 I0709 15:37:41.100179 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:41.103021 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:37:41.103013593 +0000 UTC m=+651.103840626 I0709 15:37:41.220029 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:37:41.224012 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r9cmz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:39:00.564399 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:39:00.564463 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-09 15:39:00.564442285 +0000 UTC m=+730.565269318 I0709 15:39:00.565806 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-09 15:39:00.565798397 +0000 UTC m=+730.566625430 I0709 15:39:00.599657 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:39:00.599994 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-09 15:39:00.599986338 +0000 UTC m=+730.600813391 I0709 15:39:00.788073 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:39:01.016301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-09 15:39:01.016289327 +0000 UTC m=+731.017116360 I0709 15:39:01.056705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-09 15:39:01.056690248 +0000 UTC m=+731.057517281 I0709 15:39:01.152156 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:39:01.152143474 +0000 UTC m=+731.152970507 I0709 15:39:01.184718 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:42:21.248543 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:42:21.248888 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-09 15:42:21.248879497 +0000 UTC m=+931.249706520 I0709 15:42:21.249009 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-09 15:42:21.249005629 +0000 UTC m=+931.249832652 I0709 15:42:21.266606 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:42:21.266924 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-09 15:42:21.26691696 +0000 UTC m=+931.267743983 I0709 15:42:21.377983 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:42:21.416467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-09 15:42:21.416452322 +0000 UTC m=+931.417279335 I0709 15:42:21.428493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-09 15:42:21.428482341 +0000 UTC m=+931.429309364 I0709 15:42:21.455555 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:42:21.455545316 +0000 UTC m=+931.456372339 I0709 15:42:21.469291 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:43:09.863007 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0709 15:43:09.863069 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-09 15:43:09.863061435 +0000 UTC m=+979.863888458 I0709 15:43:09.863292 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-09 15:43:09.86328719 +0000 UTC m=+979.864114213 I0709 15:43:09.883343 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:43:09.883464 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-09 15:43:09.883455566 +0000 UTC m=+979.884282609 I0709 15:43:09.967827 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:43:10.002538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-09 15:43:10.002521669 +0000 UTC m=+980.003348712 I0709 15:43:10.018154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-09 15:43:10.018130757 +0000 UTC m=+980.018957780 I0709 15:43:10.050105 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:43:10.050094572 +0000 UTC m=+980.050921595 I0709 15:43:10.065270 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:43:10.071158 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:43:10.071143815 +0000 UTC m=+980.071970838 I0709 15:43:10.081872 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0709 15:43:10.082368 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-09 15:43:10.082360181 +0000 UTC m=+980.083187224 I0709 15:43:10.082590 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"