I0724 10:02:03.677011 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0724 10:02:03.677374 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0724 10:02:03.677529 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0724 10:02:03.687919 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0724 10:02:03.688326 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0724 10:02:03.688501 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0724 10:02:03.688508 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0724 10:02:03.691172 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0724 10:02:03.703648 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0724 10:02:03.708340 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0724 10:02:03.708386 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0724 10:02:03.708402 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0724 10:02:03.708402 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0724 10:02:03.708416 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0724 10:02:03.715108 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0724 10:02:03.718303 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0724 10:02:03.721304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0724 10:02:03.723850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0724 10:02:03.726294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0724 10:02:03.728840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0724 10:02:03.731165 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0724 10:02:03.735942 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0724 10:02:03.736033 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0724 10:02:03.740480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0724 10:02:03.744579 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0724 10:02:03.747168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0724 10:02:03.749298 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0724 10:02:03.751333 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0724 10:02:03.753383 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0724 10:02:03.755170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0724 10:02:03.756798 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0724 10:02:03.756920 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0724 10:02:03.762185 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0724 10:02:03.762262 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:02:03.768048 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:02:03.768098 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:02:03.768870 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:02:03.787748 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:02:03.803316 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:02:03.827389 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:02:03.841990 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:02:03.856355 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:02:03.873853 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 10:02:15.761205 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-24 10:02:15.761184415 +0000 UTC m=+12.120699570 I0724 10:02:16.539299 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:02:16.539353 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 10:02:16.539332605 +0000 UTC m=+12.898847720 I0724 10:02:16.540668 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-24 10:02:16.540647582 +0000 UTC m=+12.900162727 E0724 10:02:16.554208 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:02:16.554299 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-24 10:02:16.554287866 +0000 UTC m=+12.913803021 E0724 10:02:16.554339 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:02:16.559066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:16.559138 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-24 10:02:16.559130901 +0000 UTC m=+12.918646016 E0724 10:02:16.575417 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0724 10:02:16.575690 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:02:16.575857 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:02:16.576010 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0724 10:02:16.578318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:16.595927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dlxh6" condition "Approved" to 2026-07-24 10:02:16.595910806 +0000 UTC m=+12.955425961 I0724 10:02:16.610200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dlxh6" condition "Ready" to 2026-07-24 10:02:16.610186998 +0000 UTC m=+12.969702133 I0724 10:02:16.636865 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:02:16.636855007 +0000 UTC m=+12.996370132 I0724 10:02:16.654735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:16.695879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:21.576796 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:02:21.576776899 +0000 UTC m=+17.936292054 I0724 10:02:43.900896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:02:43.900975 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 10:02:43.900966431 +0000 UTC m=+40.260481576 I0724 10:02:43.901646 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-24 10:02:43.901637309 +0000 UTC m=+40.261152454 I0724 10:02:43.923286 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-24 10:02:43.923268488 +0000 UTC m=+40.282783653 I0724 10:02:43.942617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:43.944644 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-24 10:02:43.944627634 +0000 UTC m=+40.304142799 I0724 10:02:44.147746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:44.178493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t44lj" condition "Approved" to 2026-07-24 10:02:44.178484563 +0000 UTC m=+40.537999678 I0724 10:02:44.217693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t44lj" condition "Ready" to 2026-07-24 10:02:44.217679068 +0000 UTC m=+40.577194193 I0724 10:02:44.255387 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:02:44.255373894 +0000 UTC m=+40.614889029 I0724 10:02:44.285555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:44.285907 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:02:44.285900653 +0000 UTC m=+40.645415778 I0724 10:02:44.296474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:02:44.317488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:07:12.550830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-99.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:07:12.550896 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-99.nip.io-tls" condition "Issuing" to 2026-07-24 10:07:12.550887371 +0000 UTC m=+308.910402516 I0724 10:07:12.551418 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-99.nip.io-tls" condition "Ready" to 2026-07-24 10:07:12.551408977 +0000 UTC m=+308.910924132 I0724 10:07:12.578999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-99.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-99.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:07:12.579063 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-99.nip.io-tls" condition "Ready" to 2026-07-24 10:07:12.579057146 +0000 UTC m=+308.938572261 I0724 10:07:12.732525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-99.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-99.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:07:12.767813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-99.nip.io-tls-pz92n" condition "Approved" to 2026-07-24 10:07:12.767800393 +0000 UTC m=+309.127315548 I0724 10:07:12.797415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-99.nip.io-tls-pz92n" condition "Ready" to 2026-07-24 10:07:12.797405313 +0000 UTC m=+309.156920438 I0724 10:07:12.834980 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-99.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:07:12.834966367 +0000 UTC m=+309.194481512 I0724 10:07:12.866439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-99.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-99.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:07:12.866827 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-99.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:07:12.86682049 +0000 UTC m=+309.226335615 I0724 10:07:12.881209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-99.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-99.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:07:12.881607 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-99.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:07:12.881599784 +0000 UTC m=+309.241114909 I0724 10:08:13.226607 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:08:13.226636 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-24 10:08:13.226629797 +0000 UTC m=+369.586144912 I0724 10:08:13.226776 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-24 10:08:13.226751858 +0000 UTC m=+369.586266973 E0724 10:08:13.240594 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:08:13.240635 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-24 10:08:13.240626603 +0000 UTC m=+369.600141728 E0724 10:08:13.240690 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 10:08:13.243481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:13.243563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:08:13.243591 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-24 10:08:13.243583174 +0000 UTC m=+369.603098309 E0724 10:08:13.258455 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0724 10:08:13.259770 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:08:13.259825 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 10:08:13.259885 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0724 10:08:13.298751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jk5z8" condition "Approved" to 2026-07-24 10:08:13.2987362 +0000 UTC m=+369.658251325 I0724 10:08:13.313757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jk5z8" condition "Ready" to 2026-07-24 10:08:13.313745288 +0000 UTC m=+369.673260403 I0724 10:08:13.338684 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:13.338666428 +0000 UTC m=+369.698181553 I0724 10:08:13.389067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:08:18.259358 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:08:18.259344089 +0000 UTC m=+374.618859234 I0724 10:09:00.919392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:09:00.919494 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-24 10:09:00.919485707 +0000 UTC m=+417.279000842 I0724 10:09:00.919569 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-24 10:09:00.919557127 +0000 UTC m=+417.279072242 I0724 10:09:00.920164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:09:00.920268 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-24 10:09:00.920262545 +0000 UTC m=+417.279777660 I0724 10:09:00.920347 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-24 10:09:00.920342915 +0000 UTC m=+417.279858030 I0724 10:09:00.920472 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:09:00.922188 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-24 10:09:00.922182275 +0000 UTC m=+417.281697380 I0724 10:09:00.920585 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-24 10:09:00.920578448 +0000 UTC m=+417.280093563 I0724 10:09:00.956266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:00.956341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:09:00.956365 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-24 10:09:00.956360171 +0000 UTC m=+417.315875276 I0724 10:09:00.970439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:00.970521 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-24 10:09:00.9705131 +0000 UTC m=+417.330028215 I0724 10:09:00.970867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:00.970898 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-24 10:09:00.970895644 +0000 UTC m=+417.330410759 I0724 10:09:01.107812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:01.162843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-btk46" condition "Approved" to 2026-07-24 10:09:01.162833569 +0000 UTC m=+417.522348694 I0724 10:09:01.178233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-r5v8j" condition "Approved" to 2026-07-24 10:09:01.17822522 +0000 UTC m=+417.537740335 I0724 10:09:01.188214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-btk46" condition "Ready" to 2026-07-24 10:09:01.188202695 +0000 UTC m=+417.547717820 I0724 10:09:01.234290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-r5v8j" condition "Ready" to 2026-07-24 10:09:01.234276876 +0000 UTC m=+417.593792011 I0724 10:09:01.304952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:09:01.305118 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-24 10:09:01.305109436 +0000 UTC m=+417.664624561 I0724 10:09:01.310818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:09:01.310846 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-24 10:09:01.310841337 +0000 UTC m=+417.670356452 I0724 10:09:01.338840 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:09:01.338827359 +0000 UTC m=+417.698342484 I0724 10:09:01.339315 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:09:01.339310543 +0000 UTC m=+417.698825668 I0724 10:09:01.349442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:01.645636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:01.694959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tfrdw" condition "Approved" to 2026-07-24 10:09:01.69493471 +0000 UTC m=+418.054449855 I0724 10:09:01.695303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n8rds" condition "Approved" to 2026-07-24 10:09:01.695292624 +0000 UTC m=+418.054807739 I0724 10:09:02.364701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:02.368854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n8rds" condition "Ready" to 2026-07-24 10:09:02.368841123 +0000 UTC m=+418.728356258 I0724 10:09:02.369961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tfrdw" condition "Ready" to 2026-07-24 10:09:02.369944395 +0000 UTC m=+418.729459510 I0724 10:09:03.098458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-d2thr" condition "Approved" to 2026-07-24 10:09:03.098443187 +0000 UTC m=+419.457958312 I0724 10:09:03.256222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-d2thr" condition "Ready" to 2026-07-24 10:09:03.256208896 +0000 UTC m=+419.615724021 I0724 10:09:03.589977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:03.736115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:04.292584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:04.292998 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:09:04.29298135 +0000 UTC m=+420.652496485 I0724 10:09:04.384477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:04.451410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:04.539424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:04.540045 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:09:04.540034052 +0000 UTC m=+420.899549167 I0724 10:09:04.846062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:17.583049 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-79rvz-tls" condition "Ready" to 2026-07-24 10:09:17.583002849 +0000 UTC m=+433.942517974 I0724 10:09:17.583064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-79rvz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:09:17.583236 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-79rvz-tls" condition "Issuing" to 2026-07-24 10:09:17.583224761 +0000 UTC m=+433.942739886 I0724 10:09:17.611523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-79rvz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-79rvz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:17.611789 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-79rvz-tls" condition "Ready" to 2026-07-24 10:09:17.611777409 +0000 UTC m=+433.971292554 I0724 10:09:18.088647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-79rvz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-79rvz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:18.134223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-79rvz-l6rlb" condition "Approved" to 2026-07-24 10:09:18.134213718 +0000 UTC m=+434.493728843 I0724 10:09:18.160747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-79rvz-l6rlb" condition "Ready" to 2026-07-24 10:09:18.160736146 +0000 UTC m=+434.520251271 I0724 10:09:18.201705 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-79rvz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:09:18.201677264 +0000 UTC m=+434.561192419 I0724 10:09:18.222889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-79rvz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-79rvz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:18.294541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-79rvz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-79rvz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:34.378003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:09:34.378034 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-24 10:09:34.378026768 +0000 UTC m=+450.737541893 I0724 10:09:34.378521 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-24 10:09:34.378506404 +0000 UTC m=+450.738021529 I0724 10:09:34.401284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:34.401418 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-24 10:09:34.401411032 +0000 UTC m=+450.760926147 I0724 10:09:34.611297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:34.643213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rz5lf" condition "Approved" to 2026-07-24 10:09:34.643195889 +0000 UTC m=+451.002711034 I0724 10:09:34.678033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rz5lf" condition "Ready" to 2026-07-24 10:09:34.678024862 +0000 UTC m=+451.037539977 I0724 10:09:34.711033 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:09:34.711008117 +0000 UTC m=+451.070523232 I0724 10:09:34.731609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:09:34.790633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:47.831258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:12:47.831308 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-24 10:12:47.831302276 +0000 UTC m=+644.190817391 I0724 10:12:47.831575 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-24 10:12:47.831560838 +0000 UTC m=+644.191075963 I0724 10:12:47.847810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:47.847963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:12:47.848036 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-24 10:12:47.84797987 +0000 UTC m=+644.207494995 I0724 10:12:48.184325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:48.194581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6fb2t" condition "Approved" to 2026-07-24 10:12:48.19457057 +0000 UTC m=+644.554085695 I0724 10:12:48.219299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6fb2t" condition "Ready" to 2026-07-24 10:12:48.219289028 +0000 UTC m=+644.578804143 I0724 10:12:48.242256 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:12:48.242247848 +0000 UTC m=+644.601762963 I0724 10:12:48.261923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:12:48.313451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:13:26.020276 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-24 10:13:26.020258528 +0000 UTC m=+682.379773673 I0724 10:13:26.027510 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 10:13:26.027637 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-24 10:13:26.027624539 +0000 UTC m=+682.387139684 I0724 10:13:26.053670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:13:26.053850 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-24 10:13:26.053738975 +0000 UTC m=+682.413254090 I0724 10:13:26.187657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 10:13:26.219843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-j4ggp" condition "Approved" to 2026-07-24 10:13:26.219828928 +0000 UTC m=+682.579344053 I0724 10:13:26.244202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-j4ggp" condition "Ready" to 2026-07-24 10:13:26.244188614 +0000 UTC m=+682.603703739 I0724 10:13:26.274240 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 10:13:26.274223426 +0000 UTC m=+682.633738551 I0724 10:13:26.303347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"