I0724 10:05:10.607477 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0724 10:05:10.607762 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0724 10:05:10.607885 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0724 10:05:10.614204 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0724 10:05:10.615270 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0724 10:05:10.615287 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0724 10:05:10.619330 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0724 10:05:10.625750 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0724 10:05:10.640322 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0724 10:05:10.645799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0724 10:05:10.648746 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0724 10:05:10.651634 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0724 10:05:10.651721 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0724 10:05:10.653958 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0724 10:05:10.657297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0724 10:05:10.661735 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0724 10:05:10.664280 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0724 10:05:10.664374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0724 10:05:10.666481 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0724 10:05:10.666630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0724 10:05:10.668745 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0724 10:05:10.671791 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0724 10:05:10.671878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0724 10:05:10.676389 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0724 10:05:10.679579 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0724 10:05:10.683373 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0724 10:05:10.687671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0724 10:05:10.690082 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0724 10:05:10.690141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0724 10:05:10.692758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0724 10:05:10.694900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0724 10:05:10.696922 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0724 10:05:10.697581 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0724 10:05:10.700824 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:05:10.701544 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:05:10.701777 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:05:10.703061 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:05:10.715888 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:05:10.730656 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:05:10.756196 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:05:10.770575 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:05:10.783368 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:05:10.789828 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:05:22.139420 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-24 10:05:22.139364105 +0000 UTC m=+11.563444009 I0724 10:05:22.839435 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-24 10:05:22.839422162 +0000 UTC m=+12.263502066 I0724 10:05:22.839969 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:05:22.839999 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 10:05:22.839992111 +0000 UTC m=+12.264072045 E0724 10:05:22.859980 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:05:22.860230 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-24 10:05:22.860216816 +0000 UTC m=+12.284296730 E0724 10:05:22.860322 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:05:22.860884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:05:22.860977 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:05:22.861003 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 10:05:22.860994798 +0000 UTC m=+12.285074722 E0724 10:05:22.888542 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0724 10:05:22.888649 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:05:22.888690 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:05:22.888739 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0724 10:05:22.922681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:05:22.933200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f8mbp" condition "Approved" to 2026-07-24 10:05:22.93318155 +0000 UTC m=+12.357261494 I0724 10:05:22.950482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f8mbp" condition "Ready" to 2026-07-24 10:05:22.950468841 +0000 UTC m=+12.374548755 I0724 10:05:22.980972 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:05:22.980947192 +0000 UTC m=+12.405027126 I0724 10:05:23.000290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:05:23.056566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:05:27.889212 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:05:27.88919552 +0000 UTC m=+17.313275464 I0724 10:05:49.849371 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-24 10:05:49.849049345 +0000 UTC m=+39.273129259 I0724 10:05:49.849846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:05:49.849923 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 10:05:49.849910346 +0000 UTC m=+39.273990250 I0724 10:05:49.877272 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-24 10:05:49.877260239 +0000 UTC m=+39.301340143 I0724 10:05:49.889221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:05:49.889303 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:05:49.889332 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 10:05:49.88932469 +0000 UTC m=+39.313404604 I0724 10:05:50.049110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9nwtp" condition "Approved" to 2026-07-24 10:05:50.04909677 +0000 UTC m=+39.473176664 I0724 10:05:50.081408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9nwtp" condition "Ready" to 2026-07-24 10:05:50.081395237 +0000 UTC m=+39.505475151 I0724 10:05:50.120585 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:05:50.120565565 +0000 UTC m=+39.544645479 I0724 10:05:50.140904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:05:50.144681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:05:50.144738 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:05:50.144718555 +0000 UTC m=+39.568798469 I0724 10:05:50.162543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:05:50.163358 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:05:50.163338101 +0000 UTC m=+39.587418045 I0724 10:09:56.645017 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready" to 2026-07-24 10:09:56.64496262 +0000 UTC m=+286.069042574 I0724 10:09:56.645720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-60.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:09:56.645848 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Issuing" to 2026-07-24 10:09:56.645815685 +0000 UTC m=+286.069895629 I0724 10:09:56.661092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:56.661169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-60.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:09:56.661192 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Issuing" to 2026-07-24 10:09:56.661185463 +0000 UTC m=+286.085265377 I0724 10:09:56.873520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-60.nip.io-tls-cztqc" condition "Approved" to 2026-07-24 10:09:56.873509035 +0000 UTC m=+286.297588949 I0724 10:09:56.901086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-60.nip.io-tls-cztqc" condition "Ready" to 2026-07-24 10:09:56.901076686 +0000 UTC m=+286.325156600 I0724 10:09:56.933499 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-60.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:09:56.933483661 +0000 UTC m=+286.357563575 I0724 10:09:56.958530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:57.000268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-60.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-60.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:01.890588 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-24 10:11:01.890556714 +0000 UTC m=+351.314636628 I0724 10:11:01.890661 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:11:01.890695 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-24 10:11:01.890686806 +0000 UTC m=+351.314766720 I0724 10:11:01.904364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0724 10:11:01.904459 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:11:01.904494 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-24 10:11:01.904487076 +0000 UTC m=+351.328566990 E0724 10:11:01.904600 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:11:01.904470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:11:01.904726 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-24 10:11:01.904709899 +0000 UTC m=+351.328789823 E0724 10:11:01.919338 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0724 10:11:01.919460 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:11:01.919520 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:11:01.919558 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0724 10:11:01.940288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-46vch" condition "Approved" to 2026-07-24 10:11:01.940278118 +0000 UTC m=+351.364358042 I0724 10:11:01.955624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-46vch" condition "Ready" to 2026-07-24 10:11:01.955613171 +0000 UTC m=+351.379693085 I0724 10:11:01.982848 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:11:01.982831144 +0000 UTC m=+351.406911058 I0724 10:11:02.004640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:06.920331 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:11:06.920316255 +0000 UTC m=+356.344396189 I0724 10:11:50.259736 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:11:50.259791 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-24 10:11:50.259762 +0000 UTC m=+399.683841914 I0724 10:11:50.259997 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-24 10:11:50.259991523 +0000 UTC m=+399.684071437 I0724 10:11:50.281019 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-24 10:11:50.28100811 +0000 UTC m=+399.705088014 I0724 10:11:50.281444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:11:50.281483 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-24 10:11:50.281475496 +0000 UTC m=+399.705555400 I0724 10:11:50.284585 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-24 10:11:50.2845743 +0000 UTC m=+399.708654204 I0724 10:11:50.284801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:11:50.284818 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-24 10:11:50.284814683 +0000 UTC m=+399.708894587 I0724 10:11:50.421006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:50.421085 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-24 10:11:50.421079421 +0000 UTC m=+399.845159325 I0724 10:11:50.448252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:50.448315 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-24 10:11:50.448309014 +0000 UTC m=+399.872388918 I0724 10:11:50.479291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:50.479377 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:11:50.479403 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-24 10:11:50.479396962 +0000 UTC m=+399.903476866 I0724 10:11:50.686529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:50.714883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:50.719300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7f96h" condition "Approved" to 2026-07-24 10:11:50.719290709 +0000 UTC m=+400.143370613 I0724 10:11:50.730881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-v25tv" condition "Approved" to 2026-07-24 10:11:50.730874522 +0000 UTC m=+400.154954436 I0724 10:11:50.740057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7f96h" condition "Ready" to 2026-07-24 10:11:50.740046641 +0000 UTC m=+400.164126555 I0724 10:11:50.756863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:50.758155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-v25tv" condition "Ready" to 2026-07-24 10:11:50.758147107 +0000 UTC m=+400.182227011 I0724 10:11:50.785380 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:11:50.78536294 +0000 UTC m=+400.209442874 I0724 10:11:50.799802 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:11:50.799785023 +0000 UTC m=+400.223864937 I0724 10:11:50.811987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7jdg9" condition "Approved" to 2026-07-24 10:11:50.811974244 +0000 UTC m=+400.236054148 I0724 10:11:50.817414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:50.817753 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:11:50.817744515 +0000 UTC m=+400.241824429 I0724 10:11:50.820775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:50.905464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7jdg9" condition "Ready" to 2026-07-24 10:11:50.905437039 +0000 UTC m=+400.329516933 I0724 10:11:51.252091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:51.599523 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:11:51.599507649 +0000 UTC m=+401.023587563 I0724 10:11:51.798572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:51.799009 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:11:51.799002184 +0000 UTC m=+401.223082098 I0724 10:11:52.050614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:52.100064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:59.150633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:11:59.150790 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" condition "Issuing" to 2026-07-24 10:11:59.150776202 +0000 UTC m=+408.574856136 I0724 10:11:59.151044 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" condition "Ready" to 2026-07-24 10:11:59.151004445 +0000 UTC m=+408.575084389 I0724 10:11:59.168114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:59.168238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:11:59.168317 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" condition "Issuing" to 2026-07-24 10:11:59.168310946 +0000 UTC m=+408.592390860 I0724 10:11:59.690899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-q5nl8-2lc8r" condition "Approved" to 2026-07-24 10:11:59.69088531 +0000 UTC m=+409.114965224 I0724 10:11:59.721158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-q5nl8-2lc8r" condition "Ready" to 2026-07-24 10:11:59.721149271 +0000 UTC m=+409.145229175 I0724 10:11:59.755384 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:11:59.755371448 +0000 UTC m=+409.179451362 I0724 10:11:59.775773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:59.776077 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:11:59.776069526 +0000 UTC m=+409.200149440 I0724 10:11:59.798495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:11:59.798854 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q5nl8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:11:59.798844303 +0000 UTC m=+409.222924237 I0724 10:12:10.982488 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-24 10:12:10.982469599 +0000 UTC m=+420.406549533 I0724 10:12:10.983160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:12:10.983218 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-24 10:12:10.98321185 +0000 UTC m=+420.407291784 I0724 10:12:11.031428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:11.031610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:12:11.031898 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-24 10:12:11.031888619 +0000 UTC m=+420.455968543 I0724 10:12:11.355282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:11.367268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4zkt9" condition "Approved" to 2026-07-24 10:12:11.367248481 +0000 UTC m=+420.791328385 I0724 10:12:11.392464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4zkt9" condition "Ready" to 2026-07-24 10:12:11.392452307 +0000 UTC m=+420.816532211 I0724 10:12:11.423347 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:12:11.423330341 +0000 UTC m=+420.847410255 I0724 10:12:11.445438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:15:31.223462 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-24 10:15:31.223445177 +0000 UTC m=+620.647525091 I0724 10:15:31.223855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:15:31.223934 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-24 10:15:31.223926782 +0000 UTC m=+620.648006706 I0724 10:15:31.241636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:15:31.241697 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-24 10:15:31.241691838 +0000 UTC m=+620.665771742 I0724 10:15:31.407357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:15:31.448369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-76gb9" condition "Approved" to 2026-07-24 10:15:31.448354152 +0000 UTC m=+620.872434056 I0724 10:15:31.472323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-76gb9" condition "Ready" to 2026-07-24 10:15:31.472309664 +0000 UTC m=+620.896389598 I0724 10:15:31.502638 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:15:31.502623522 +0000 UTC m=+620.926703436 I0724 10:15:31.525145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:15:31.526151 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:15:31.526135459 +0000 UTC m=+620.950215393 I0724 10:15:31.541255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:15:31.556799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:16:13.469297 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:16:13.469368 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-24 10:16:13.46935886 +0000 UTC m=+662.893438804 I0724 10:16:13.469402 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-24 10:16:13.46939737 +0000 UTC m=+662.893477264 I0724 10:16:13.504837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:16:13.504943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:16:13.504973 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-24 10:16:13.504965229 +0000 UTC m=+662.929045173 I0724 10:16:13.661703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-klf96" condition "Approved" to 2026-07-24 10:16:13.661695328 +0000 UTC m=+663.085775232 I0724 10:16:13.679001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-klf96" condition "Ready" to 2026-07-24 10:16:13.678993096 +0000 UTC m=+663.103072990 I0724 10:16:13.710089 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:16:13.71007586 +0000 UTC m=+663.134155764 I0724 10:16:13.731352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"