I0714 05:10:57.363606 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0714 05:10:57.363790 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0714 05:10:57.363897 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0714 05:10:57.369799 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0714 05:10:57.370500 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0714 05:10:57.370608 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0714 05:10:57.370655 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0714 05:10:57.372591 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0714 05:10:57.390604 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0714 05:10:57.394637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0714 05:10:57.397584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0714 05:10:57.403517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0714 05:10:57.406410 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0714 05:10:57.409380 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0714 05:10:57.411846 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0714 05:10:57.414038 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0714 05:10:57.416192 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0714 05:10:57.418016 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0714 05:10:57.424697 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0714 05:10:57.428136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0714 05:10:57.430510 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0714 05:10:57.430551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0714 05:10:57.433109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0714 05:10:57.435608 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0714 05:10:57.437736 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0714 05:10:57.437758 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0714 05:10:57.437766 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0714 05:10:57.437807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0714 05:10:57.439659 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0714 05:10:57.439833 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0714 05:10:57.441521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0714 05:10:57.443602 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0714 05:10:57.443834 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0714 05:10:57.446896 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 05:10:57.448709 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 05:10:57.449004 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 05:10:57.450654 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 05:10:57.466747 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 05:10:57.477702 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 05:10:57.498523 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 05:10:57.510128 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 05:10:57.526777 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 05:10:57.536013 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 05:11:09.442192 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-14 05:11:09.442172352 +0000 UTC m=+12.122183696 I0714 05:11:10.192680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:11:10.192734 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 05:11:10.192724555 +0000 UTC m=+12.872735899 I0714 05:11:10.193998 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-14 05:11:10.193989951 +0000 UTC m=+12.874001285 E0714 05:11:10.206503 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 05:11:10.206558 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-14 05:11:10.206553415 +0000 UTC m=+12.886564729 E0714 05:11:10.206580 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 05:11:10.213793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:11:10.213898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:11:10.213982 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 05:11:10.213975341 +0000 UTC m=+12.893986655 E0714 05:11:10.216572 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0714 05:11:10.217130 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 05:11:10.217187 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 05:11:10.217250 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0714 05:11:10.248748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zvlzs" condition "Approved" to 2026-07-14 05:11:10.248737071 +0000 UTC m=+12.928748385 I0714 05:11:10.265893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zvlzs" condition "Ready" to 2026-07-14 05:11:10.265882801 +0000 UTC m=+12.945894105 I0714 05:11:10.301468 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:11:10.301456369 +0000 UTC m=+12.981467683 I0714 05:11:10.316875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:11:10.317526 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:11:10.317518706 +0000 UTC m=+12.997530020 I0714 05:11:10.324752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:11:10.334519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:11:15.217386 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:11:15.217370369 +0000 UTC m=+17.897381713 I0714 05:11:37.592098 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:11:37.592228 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 05:11:37.592136068 +0000 UTC m=+40.272147382 I0714 05:11:37.592449 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 05:11:37.592441423 +0000 UTC m=+40.272452737 I0714 05:11:37.612241 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-14 05:11:37.612226637 +0000 UTC m=+40.292237951 I0714 05:11:37.620816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:11:37.620880 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 05:11:37.620873444 +0000 UTC m=+40.300884748 I0714 05:11:37.872447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:11:37.907821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wzhzr" condition "Approved" to 2026-07-14 05:11:37.907783337 +0000 UTC m=+40.587794681 I0714 05:11:37.951846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wzhzr" condition "Ready" to 2026-07-14 05:11:37.951825762 +0000 UTC m=+40.631837076 I0714 05:11:37.992974 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:11:37.992958447 +0000 UTC m=+40.672969751 I0714 05:11:38.021728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:11:38.064281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:11:38.073652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:16:00.218793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:16:00.218825 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Issuing" to 2026-07-14 05:16:00.218818274 +0000 UTC m=+302.898829578 I0714 05:16:00.219352 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Ready" to 2026-07-14 05:16:00.219348263 +0000 UTC m=+302.899359567 I0714 05:16:00.234357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:16:00.234455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:16:00.234476 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Issuing" to 2026-07-14 05:16:00.234469172 +0000 UTC m=+302.914480476 I0714 05:16:00.360085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-23.nip.io-tls-wmbqg" condition "Approved" to 2026-07-14 05:16:00.360049625 +0000 UTC m=+303.040060969 I0714 05:16:00.384037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-23.nip.io-tls-wmbqg" condition "Ready" to 2026-07-14 05:16:00.384022452 +0000 UTC m=+303.064033766 I0714 05:16:00.410962 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:16:00.410952491 +0000 UTC m=+303.090963785 I0714 05:16:00.428400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:05.000113 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-14 05:17:05.000059443 +0000 UTC m=+367.680070827 I0714 05:17:05.000149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:17:05.000540 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 05:17:05.00051087 +0000 UTC m=+367.680522234 I0714 05:17:05.019381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:05.019554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:17:05.019583 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 05:17:05.019575386 +0000 UTC m=+367.699586700 E0714 05:17:05.020823 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 05:17:05.020932 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-14 05:17:05.020924486 +0000 UTC m=+367.700935810 E0714 05:17:05.021050 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 05:17:05.031668 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0714 05:17:05.031803 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 05:17:05.031841 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 05:17:05.031880 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0714 05:17:05.052528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:05.055501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-tlf8l" condition "Approved" to 2026-07-14 05:17:05.055490324 +0000 UTC m=+367.735501638 I0714 05:17:05.067604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-tlf8l" condition "Ready" to 2026-07-14 05:17:05.067588346 +0000 UTC m=+367.747599660 I0714 05:17:05.088985 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:17:05.088968946 +0000 UTC m=+367.768980280 I0714 05:17:05.103552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:05.103721 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:17:05.103711958 +0000 UTC m=+367.783723262 I0714 05:17:05.123083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:10.032920 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:17:10.03290402 +0000 UTC m=+372.712915364 I0714 05:17:52.635908 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:17:52.635948 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-14 05:17:52.635938405 +0000 UTC m=+415.315949709 I0714 05:17:52.636314 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-14 05:17:52.63629527 +0000 UTC m=+415.316306564 I0714 05:17:52.639760 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 05:17:52.639745947 +0000 UTC m=+415.319757241 I0714 05:17:52.640225 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-14 05:17:52.640221374 +0000 UTC m=+415.320232678 I0714 05:17:52.640414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:17:52.640432 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-14 05:17:52.640429606 +0000 UTC m=+415.320440900 I0714 05:17:52.640491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:17:52.640584 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-14 05:17:52.640559578 +0000 UTC m=+415.320570882 I0714 05:17:52.777535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:52.779226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:52.779718 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-14 05:17:52.779491292 +0000 UTC m=+415.459502596 I0714 05:17:52.779773 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 05:17:52.779761756 +0000 UTC m=+415.459773060 I0714 05:17:52.783441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:52.783505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:17:52.783526 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-14 05:17:52.783522778 +0000 UTC m=+415.463534082 I0714 05:17:53.044813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:53.069218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:53.085855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vhlcj" condition "Approved" to 2026-07-14 05:17:53.085843059 +0000 UTC m=+415.765854353 I0714 05:17:53.111423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vhlcj" condition "Ready" to 2026-07-14 05:17:53.111406828 +0000 UTC m=+415.791418142 I0714 05:17:53.117120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kfd8g" condition "Approved" to 2026-07-14 05:17:53.117092886 +0000 UTC m=+415.797104190 I0714 05:17:53.146400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vwrfw" condition "Approved" to 2026-07-14 05:17:53.146386577 +0000 UTC m=+415.826397891 I0714 05:17:53.147791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kfd8g" condition "Ready" to 2026-07-14 05:17:53.147778466 +0000 UTC m=+415.827789770 I0714 05:17:53.169594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vwrfw" condition "Ready" to 2026-07-14 05:17:53.169581734 +0000 UTC m=+415.849593038 I0714 05:17:53.172824 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:17:53.172816849 +0000 UTC m=+415.852828153 I0714 05:17:53.243695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:53.297658 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:17:53.297637856 +0000 UTC m=+415.977649160 I0714 05:17:53.399623 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:17:53.399606861 +0000 UTC m=+416.079618175 I0714 05:17:53.544290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:53.644468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:53.644850 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:17:53.644840276 +0000 UTC m=+416.324851580 I0714 05:17:54.043310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:17:54.345293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:18:00.549280 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" condition "Ready" to 2026-07-14 05:18:00.549245354 +0000 UTC m=+423.229256658 I0714 05:18:00.549318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:18:00.549375 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" condition "Issuing" to 2026-07-14 05:18:00.549361875 +0000 UTC m=+423.229373219 I0714 05:18:00.568161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:18:00.568239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:18:00.568257 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" condition "Issuing" to 2026-07-14 05:18:00.568249841 +0000 UTC m=+423.248261135 I0714 05:18:00.793081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:18:00.808593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5l8fd-59hr9" condition "Approved" to 2026-07-14 05:18:00.808542481 +0000 UTC m=+423.488553785 I0714 05:18:00.838827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5l8fd-59hr9" condition "Ready" to 2026-07-14 05:18:00.838814361 +0000 UTC m=+423.518825665 I0714 05:18:00.872201 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:18:00.872187993 +0000 UTC m=+423.552199297 I0714 05:18:00.895736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:18:00.896023 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:18:00.896012695 +0000 UTC m=+423.576023999 I0714 05:18:00.919343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:18:00.922927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5l8fd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:18:12.153552 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-14 05:18:12.153518309 +0000 UTC m=+434.833529613 I0714 05:18:12.154380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:18:12.154391 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-14 05:18:12.154388661 +0000 UTC m=+434.834399965 I0714 05:18:12.173157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:18:12.173216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:18:12.173230 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-14 05:18:12.173223671 +0000 UTC m=+434.853234985 I0714 05:18:12.325098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9lvtg" condition "Approved" to 2026-07-14 05:18:12.325076308 +0000 UTC m=+435.005087622 I0714 05:18:12.355838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9lvtg" condition "Ready" to 2026-07-14 05:18:12.355828147 +0000 UTC m=+435.035839451 I0714 05:18:12.390858 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:18:12.390835122 +0000 UTC m=+435.070846436 I0714 05:18:12.411714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:18:12.412073 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:18:12.412060993 +0000 UTC m=+435.092072307 I0714 05:18:12.420561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:18:12.432206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:18:12.433064 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:18:12.433052542 +0000 UTC m=+435.113063846 I0714 05:21:36.701473 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-14 05:21:36.701458038 +0000 UTC m=+639.381469342 I0714 05:21:36.702040 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:21:36.702063 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-14 05:21:36.702060065 +0000 UTC m=+639.382071379 I0714 05:21:36.716258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:21:36.716308 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:21:36.716321 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-14 05:21:36.716315496 +0000 UTC m=+639.396326810 I0714 05:21:37.078963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:21:37.090816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j2p84" condition "Approved" to 2026-07-14 05:21:37.090803479 +0000 UTC m=+639.770814793 I0714 05:21:37.109367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j2p84" condition "Ready" to 2026-07-14 05:21:37.109357888 +0000 UTC m=+639.789369192 I0714 05:21:37.136927 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:21:37.13691431 +0000 UTC m=+639.816925624 I0714 05:21:37.158300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:21:37.158713 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:21:37.158707686 +0000 UTC m=+639.838719000 I0714 05:21:37.175750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:21:37.178023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:21:37.178286 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:21:37.178279097 +0000 UTC m=+639.858290411 I0714 05:22:18.966779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 05:22:18.966887 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-14 05:22:18.966876687 +0000 UTC m=+681.646888031 I0714 05:22:18.967523 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-14 05:22:18.967514573 +0000 UTC m=+681.647525917 I0714 05:22:18.993145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:22:18.993195 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-14 05:22:18.99319035 +0000 UTC m=+681.673201654 I0714 05:22:19.139372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:22:19.172274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-k2w55" condition "Approved" to 2026-07-14 05:22:19.172254188 +0000 UTC m=+681.852265532 I0714 05:22:19.198867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-k2w55" condition "Ready" to 2026-07-14 05:22:19.198837854 +0000 UTC m=+681.878849148 I0714 05:22:19.237778 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 05:22:19.237763699 +0000 UTC m=+681.917775013 I0714 05:22:19.277240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 05:22:19.347601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"