I0703 18:47:18.167372 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0703 18:47:18.167549 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0703 18:47:18.167682 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0703 18:47:18.172060 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0703 18:47:18.172481 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0703 18:47:18.172961 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0703 18:47:18.173282 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0703 18:47:18.180233 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0703 18:47:18.194203 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0703 18:47:18.200608 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0703 18:47:18.203962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0703 18:47:18.206401 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0703 18:47:18.206427 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0703 18:47:18.206437 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0703 18:47:18.206505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0703 18:47:18.210719 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0703 18:47:18.212554 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0703 18:47:18.214301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0703 18:47:18.215807 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0703 18:47:18.215823 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0703 18:47:18.215969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0703 18:47:18.217716 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0703 18:47:18.219640 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0703 18:47:18.221307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0703 18:47:18.223121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0703 18:47:18.227946 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0703 18:47:18.231982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0703 18:47:18.234452 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0703 18:47:18.236965 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0703 18:47:18.239367 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0703 18:47:18.242066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0703 18:47:18.243901 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0703 18:47:18.244474 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0703 18:47:18.246995 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 18:47:18.247808 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 18:47:18.248417 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 18:47:18.248939 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 18:47:18.266530 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 18:47:18.284693 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 18:47:18.300077 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 18:47:18.317250 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 18:47:18.334392 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 18:47:18.338653 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0703 18:47:29.461091 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-03 18:47:29.461073441 +0000 UTC m=+11.332150355 I0703 18:47:30.226750 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-03 18:47:30.226733967 +0000 UTC m=+12.097810881 I0703 18:47:30.227337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:47:30.227447 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-03 18:47:30.227426219 +0000 UTC m=+12.098503173 E0703 18:47:30.242009 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 18:47:30.242128 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-03 18:47:30.242119149 +0000 UTC m=+12.113196083 E0703 18:47:30.242161 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 18:47:30.243922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:47:30.243992 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-03 18:47:30.24398628 +0000 UTC m=+12.115063204 E0703 18:47:30.257921 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0703 18:47:30.258107 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 18:47:30.258163 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 18:47:30.258212 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0703 18:47:30.267434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:47:30.288220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w6jwt" condition "Approved" to 2026-07-03 18:47:30.288203812 +0000 UTC m=+12.159280736 I0703 18:47:30.302645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w6jwt" condition "Ready" to 2026-07-03 18:47:30.302633703 +0000 UTC m=+12.173710627 I0703 18:47:30.323814 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:47:30.323802853 +0000 UTC m=+12.194879787 I0703 18:47:30.427419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:47:30.474289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:47:35.258582 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:47:35.258542505 +0000 UTC m=+17.129619459 I0703 18:48:04.832837 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-03 18:48:04.832775026 +0000 UTC m=+46.703851950 I0703 18:48:04.832857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:48:04.833320 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-03 18:48:04.833298998 +0000 UTC m=+46.704375922 I0703 18:48:04.860200 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-03 18:48:04.860184754 +0000 UTC m=+46.731261678 I0703 18:48:04.871141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:48:04.871236 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-03 18:48:04.871215895 +0000 UTC m=+46.742292849 I0703 18:48:05.070647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:48:05.101499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-brbzm" condition "Approved" to 2026-07-03 18:48:05.101487325 +0000 UTC m=+46.972564249 I0703 18:48:05.127639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-brbzm" condition "Ready" to 2026-07-03 18:48:05.127629687 +0000 UTC m=+46.998706601 I0703 18:48:05.182629 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:48:05.182605956 +0000 UTC m=+47.053682910 I0703 18:48:05.213211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:48:05.213712 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:48:05.213704114 +0000 UTC m=+47.084781048 I0703 18:48:05.221890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:48:05.237520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:53:09.124860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:53:09.125273 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-07-03 18:53:09.124731477 +0000 UTC m=+350.995808421 I0703 18:53:09.125329 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-07-03 18:53:09.124926522 +0000 UTC m=+350.996003466 I0703 18:53:09.207048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:53:09.207103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:53:09.207117 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-07-03 18:53:09.207110229 +0000 UTC m=+351.078187153 I0703 18:53:09.430015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-wjk7r" condition "Approved" to 2026-07-03 18:53:09.430002676 +0000 UTC m=+351.301079600 I0703 18:53:09.456160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-wjk7r" condition "Ready" to 2026-07-03 18:53:09.456144571 +0000 UTC m=+351.327221525 I0703 18:53:09.482719 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:53:09.482705356 +0000 UTC m=+351.353782280 I0703 18:53:09.506094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:54:15.562221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:54:15.562254 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-03 18:54:15.562239809 +0000 UTC m=+417.433316753 I0703 18:54:15.562320 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-03 18:54:15.562308251 +0000 UTC m=+417.433385205 E0703 18:54:15.610064 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 18:54:15.610124 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-03 18:54:15.61011282 +0000 UTC m=+417.481189764 E0703 18:54:15.610198 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0703 18:54:15.615283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:54:15.615372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:54:15.615396 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-03 18:54:15.615388188 +0000 UTC m=+417.486465122 E0703 18:54:15.655869 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0703 18:54:15.656200 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 18:54:15.656259 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0703 18:54:15.656312 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0703 18:54:15.963283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7vthb" condition "Approved" to 2026-07-03 18:54:15.963269524 +0000 UTC m=+417.834346478 I0703 18:54:15.997921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7vthb" condition "Ready" to 2026-07-03 18:54:15.997898413 +0000 UTC m=+417.868975337 I0703 18:54:16.020957 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:54:16.020937974 +0000 UTC m=+417.892014918 I0703 18:54:16.040422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:54:16.041276 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:54:16.041266209 +0000 UTC m=+417.912343133 I0703 18:54:16.055581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:54:16.055934 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:54:16.055921259 +0000 UTC m=+417.926998213 I0703 18:54:20.656461 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:54:20.656443514 +0000 UTC m=+422.527520468 I0703 18:55:04.704183 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-03 18:55:04.704140737 +0000 UTC m=+466.575217651 I0703 18:55:04.704409 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:55:04.704427 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-03 18:55:04.704424062 +0000 UTC m=+466.575500976 I0703 18:55:04.738545 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-03 18:55:04.738534843 +0000 UTC m=+466.609611757 I0703 18:55:04.738818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:55:04.739231 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-03 18:55:04.739224145 +0000 UTC m=+466.610301069 I0703 18:55:04.739002 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-03 18:55:04.738995141 +0000 UTC m=+466.610072055 I0703 18:55:04.739054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:55:04.739675 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-03 18:55:04.739667003 +0000 UTC m=+466.610743967 I0703 18:55:04.744056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:04.745105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:55:04.745127 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-03 18:55:04.745123295 +0000 UTC m=+466.616200209 I0703 18:55:04.766461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:04.766520 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-03 18:55:04.766514781 +0000 UTC m=+466.637591695 I0703 18:55:04.778069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:04.779498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:55:04.779566 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-03 18:55:04.779556162 +0000 UTC m=+466.650633086 I0703 18:55:04.916567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:04.942737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-h27sj" condition "Approved" to 2026-07-03 18:55:04.942723533 +0000 UTC m=+466.813800447 I0703 18:55:04.951710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-llgt7" condition "Approved" to 2026-07-03 18:55:04.948222585 +0000 UTC m=+466.819299499 I0703 18:55:04.962419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-h27sj" condition "Ready" to 2026-07-03 18:55:04.962413988 +0000 UTC m=+466.833490892 I0703 18:55:04.966801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-llgt7" condition "Ready" to 2026-07-03 18:55:04.966790708 +0000 UTC m=+466.837867632 I0703 18:55:05.003455 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:55:05.002364077 +0000 UTC m=+466.873441001 I0703 18:55:05.006208 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:55:05.006186718 +0000 UTC m=+466.877263642 I0703 18:55:05.043770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:05.044155 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:55:05.04415064 +0000 UTC m=+466.915227554 I0703 18:55:05.045210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:05.045452 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:55:05.045445523 +0000 UTC m=+466.916522437 I0703 18:55:05.131387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:05.381161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:05.552050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:05.737785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5z7cq" condition "Approved" to 2026-07-03 18:55:05.737771568 +0000 UTC m=+467.608848502 I0703 18:55:05.841161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5z7cq" condition "Ready" to 2026-07-03 18:55:05.841144208 +0000 UTC m=+467.712221152 I0703 18:55:06.280218 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:55:06.280201464 +0000 UTC m=+468.151278388 I0703 18:55:06.380390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:06.381087 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:55:06.381074715 +0000 UTC m=+468.252151669 I0703 18:55:06.582570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:16.305044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:55:16.305077 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" condition "Issuing" to 2026-07-03 18:55:16.30506887 +0000 UTC m=+478.176145794 I0703 18:55:16.305550 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" condition "Ready" to 2026-07-03 18:55:16.305544549 +0000 UTC m=+478.176621483 I0703 18:55:16.321201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n52gw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:16.321291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:55:16.321315 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" condition "Issuing" to 2026-07-03 18:55:16.321309954 +0000 UTC m=+478.192386878 I0703 18:55:16.509872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n52gw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:16.521024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n52gw-9v7wf" condition "Approved" to 2026-07-03 18:55:16.521009327 +0000 UTC m=+478.392086241 I0703 18:55:16.548817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n52gw-9v7wf" condition "Ready" to 2026-07-03 18:55:16.548805951 +0000 UTC m=+478.419882865 I0703 18:55:16.590219 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:55:16.590210331 +0000 UTC m=+478.461287235 I0703 18:55:16.834831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n52gw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:16.835187 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:55:16.835180715 +0000 UTC m=+478.706257639 I0703 18:55:17.228459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n52gw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n52gw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:33.135419 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-03 18:55:33.135399788 +0000 UTC m=+495.006476732 I0703 18:55:33.135832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:55:33.135862 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-03 18:55:33.135854716 +0000 UTC m=+495.006931660 I0703 18:55:33.155534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:33.155614 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-03 18:55:33.155607744 +0000 UTC m=+495.026684668 I0703 18:55:33.550477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:33.681333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qwxqd" condition "Approved" to 2026-07-03 18:55:33.681315707 +0000 UTC m=+495.552392641 I0703 18:55:33.712290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qwxqd" condition "Ready" to 2026-07-03 18:55:33.712276085 +0000 UTC m=+495.583353009 I0703 18:55:33.746161 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:55:33.746148893 +0000 UTC m=+495.617225797 I0703 18:55:33.767806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:55:33.817841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:58:55.508835 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-03 18:58:55.508820626 +0000 UTC m=+697.379897540 I0703 18:58:55.509115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:58:55.509188 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-03 18:58:55.509177621 +0000 UTC m=+697.380254575 I0703 18:58:55.526845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:58:55.527112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:58:55.527148 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-03 18:58:55.52714028 +0000 UTC m=+697.398217214 I0703 18:58:55.722043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:58:55.733385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-v9spb" condition "Approved" to 2026-07-03 18:58:55.733359654 +0000 UTC m=+697.604436578 I0703 18:58:55.751240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-v9spb" condition "Ready" to 2026-07-03 18:58:55.751229631 +0000 UTC m=+697.622306545 I0703 18:58:55.784497 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:58:55.78447416 +0000 UTC m=+697.655551074 I0703 18:58:55.813959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:58:55.814477 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:58:55.814468751 +0000 UTC m=+697.685545665 I0703 18:58:55.828664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:58:55.829273 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:58:55.829263372 +0000 UTC m=+697.700340296 I0703 18:59:35.817206 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-03 18:59:35.817194053 +0000 UTC m=+737.688270977 I0703 18:59:35.817620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:59:35.817672 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-03 18:59:35.81766652 +0000 UTC m=+737.688743434 I0703 18:59:35.838122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0703 18:59:35.838338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0703 18:59:35.838372 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-03 18:59:35.838363216 +0000 UTC m=+737.709440160 I0703 18:59:36.019600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vjrvq" condition "Approved" to 2026-07-03 18:59:36.019590482 +0000 UTC m=+737.890667396 I0703 18:59:36.039596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vjrvq" condition "Ready" to 2026-07-03 18:59:36.039586928 +0000 UTC m=+737.910663852 I0703 18:59:36.079594 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-03 18:59:36.07957655 +0000 UTC m=+737.950653464 I0703 18:59:36.184911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"