I0702 10:07:09.247653 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0702 10:07:09.247759 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0702 10:07:09.247961 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0702 10:07:09.252650 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0702 10:07:09.253257 1 controller.go:156] "cert-manager/controller: starting leader election" I0702 10:07:09.253343 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0702 10:07:09.253535 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0702 10:07:09.259418 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0702 10:07:09.279201 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0702 10:07:09.282646 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0702 10:07:09.285362 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0702 10:07:09.288408 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0702 10:07:09.294817 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0702 10:07:09.299091 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0702 10:07:09.302955 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0702 10:07:09.306097 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0702 10:07:09.307809 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0702 10:07:09.307855 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0702 10:07:09.309765 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0702 10:07:09.311530 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0702 10:07:09.314693 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0702 10:07:09.320165 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0702 10:07:09.325792 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0702 10:07:09.327453 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0702 10:07:09.327478 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0702 10:07:09.327489 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0702 10:07:09.329256 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0702 10:07:09.329321 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0702 10:07:09.331249 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0702 10:07:09.333070 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0702 10:07:09.334790 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0702 10:07:09.334807 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0702 10:07:09.335125 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0702 10:07:21.845661 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 10:07:21.845635579 +0000 UTC m=+12.628404515 I0702 10:07:22.549224 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 10:07:22.549209382 +0000 UTC m=+13.331978328 I0702 10:07:22.549261 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:22.549317 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 10:07:22.549310294 +0000 UTC m=+13.332079260 E0702 10:07:22.562771 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:07:22.562930 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 10:07:22.562917149 +0000 UTC m=+13.345686125 E0702 10:07:22.562966 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:07:22.567141 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:22.567255 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:22.567312 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 10:07:22.567303624 +0000 UTC m=+13.350072580 E0702 10:07:22.576451 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0702 10:07:22.576566 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:07:22.576625 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:07:22.576701 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0702 10:07:22.601675 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:22.604104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4c254" condition "Approved" to 2026-07-02 10:07:22.604094042 +0000 UTC m=+13.386862978 I0702 10:07:22.619949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4c254" condition "Ready" to 2026-07-02 10:07:22.619938225 +0000 UTC m=+13.402707191 I0702 10:07:22.655608 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:22.655596649 +0000 UTC m=+13.438365585 I0702 10:07:22.707738 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:27.577305 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:27.577286035 +0000 UTC m=+18.360055011 I0702 10:07:49.221094 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 10:07:49.221078275 +0000 UTC m=+40.003847211 I0702 10:07:49.221385 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:49.223875 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 10:07:49.22385877 +0000 UTC m=+40.006627776 I0702 10:07:49.236488 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 10:07:49.236472457 +0000 UTC m=+40.019241413 I0702 10:07:49.258856 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:07:49.258965 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:07:49.259011 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 10:07:49.259005138 +0000 UTC m=+40.041774084 I0702 10:07:49.485882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2vxzj" condition "Approved" to 2026-07-02 10:07:49.485863701 +0000 UTC m=+40.268632667 I0702 10:07:49.520463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2vxzj" condition "Ready" to 2026-07-02 10:07:49.520447368 +0000 UTC m=+40.303216314 I0702 10:07:49.554877 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:07:49.554862261 +0000 UTC m=+40.337631207 I0702 10:07:49.590383 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:10:41.469412 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-193.nip.io-tls" condition "Ready" to 2026-07-02 10:10:41.469385158 +0000 UTC m=+212.252154114 I0702 10:10:41.469728 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-193.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:10:41.471364 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-193.nip.io-tls" condition "Issuing" to 2026-07-02 10:10:41.471354013 +0000 UTC m=+212.254122959 I0702 10:10:41.486308 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-193.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-193.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:10:41.486438 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-193.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:10:41.486526 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-193.nip.io-tls" condition "Issuing" to 2026-07-02 10:10:41.48647464 +0000 UTC m=+212.269243586 I0702 10:10:41.759139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-193.nip.io-tls-2b8dc" condition "Approved" to 2026-07-02 10:10:41.759120396 +0000 UTC m=+212.541889342 I0702 10:10:41.797243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-193.nip.io-tls-2b8dc" condition "Ready" to 2026-07-02 10:10:41.797228301 +0000 UTC m=+212.579997247 I0702 10:10:41.833845 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-193.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:10:41.833828785 +0000 UTC m=+212.616597731 I0702 10:10:41.863224 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-193.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-193.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:10:41.863744 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-193.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:10:41.863736983 +0000 UTC m=+212.646505929 I0702 10:10:41.887454 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-193.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-193.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:10:41.887971 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-193.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:10:41.887961827 +0000 UTC m=+212.670730783 I0702 10:11:38.195146 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:11:38.195134 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 10:11:38.195112527 +0000 UTC m=+268.977881503 I0702 10:11:38.195281 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 10:11:38.195224718 +0000 UTC m=+268.977993694 E0702 10:11:38.207511 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:11:38.207581 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 10:11:38.207572108 +0000 UTC m=+268.990341054 E0702 10:11:38.207711 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 10:11:38.215983 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:11:38.216070 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:11:38.216095 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 10:11:38.216089362 +0000 UTC m=+268.998858308 E0702 10:11:38.221180 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0702 10:11:38.221265 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:11:38.221443 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 10:11:38.221495 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0702 10:11:38.253444 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:11:38.259473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8xg8w" condition "Approved" to 2026-07-02 10:11:38.259458298 +0000 UTC m=+269.042227264 I0702 10:11:38.275484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8xg8w" condition "Ready" to 2026-07-02 10:11:38.275470662 +0000 UTC m=+269.058239608 I0702 10:11:38.298214 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:11:38.298187368 +0000 UTC m=+269.080956344 I0702 10:11:38.313892 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:11:38.314191 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:11:38.314183232 +0000 UTC m=+269.096952168 I0702 10:11:38.331076 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:11:43.221599 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:11:43.221578791 +0000 UTC m=+274.004347767 I0702 10:12:23.640895 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 10:12:23.64087554 +0000 UTC m=+314.423644516 I0702 10:12:23.641221 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:12:23.641294 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 10:12:23.641286644 +0000 UTC m=+314.424055590 I0702 10:12:23.661226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 10:12:23.661213927 +0000 UTC m=+314.443982863 I0702 10:12:23.661249 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:12:23.661405 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 10:12:23.661397169 +0000 UTC m=+314.444166095 I0702 10:12:23.661488 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:12:23.661520 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 10:12:23.6615155 +0000 UTC m=+314.444284436 I0702 10:12:23.661784 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 10:12:23.661777263 +0000 UTC m=+314.444546219 I0702 10:12:23.687605 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:23.687682 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 10:12:23.687672707 +0000 UTC m=+314.470441653 I0702 10:12:23.709981 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:23.710220 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:12:23.710302 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 10:12:23.710296582 +0000 UTC m=+314.493065518 I0702 10:12:23.710692 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:23.710788 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 10:12:23.710783467 +0000 UTC m=+314.493552403 I0702 10:12:23.920019 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:23.928512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gbjgc" condition "Approved" to 2026-07-02 10:12:23.928502584 +0000 UTC m=+314.711271520 I0702 10:12:23.949062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gbjgc" condition "Ready" to 2026-07-02 10:12:23.949049304 +0000 UTC m=+314.731818250 I0702 10:12:23.949364 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:23.983860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-65ps5" condition "Approved" to 2026-07-02 10:12:23.98384344 +0000 UTC m=+314.766612386 I0702 10:12:23.986105 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:23.986099037 +0000 UTC m=+314.768867973 I0702 10:12:23.987392 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:24.007451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-65ps5" condition "Ready" to 2026-07-02 10:12:24.007440657 +0000 UTC m=+314.790209593 I0702 10:12:24.016824 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:24.018756 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:24.018747899 +0000 UTC m=+314.801516835 I0702 10:12:24.040045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-p8fwc" condition "Approved" to 2026-07-02 10:12:24.040031727 +0000 UTC m=+314.822800673 I0702 10:12:24.103619 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:24.103606021 +0000 UTC m=+314.886374967 I0702 10:12:24.141230 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:24.201207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-p8fwc" condition "Ready" to 2026-07-02 10:12:24.201191681 +0000 UTC m=+314.983960637 I0702 10:12:24.593804 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:24.594622 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:24.594609619 +0000 UTC m=+315.377378585 I0702 10:12:24.994907 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:24.994888247 +0000 UTC m=+315.777657203 I0702 10:12:25.078309 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:25.078298971 +0000 UTC m=+315.861067907 I0702 10:12:25.141253 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:25.191625 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:25.365044 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:25.365808 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:25.365800059 +0000 UTC m=+316.148569005 I0702 10:12:25.544329 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:34.117618 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls" condition "Ready" to 2026-07-02 10:12:34.117590051 +0000 UTC m=+324.900359027 I0702 10:12:34.117956 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:12:34.117990 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls" condition "Issuing" to 2026-07-02 10:12:34.117983446 +0000 UTC m=+324.900752392 I0702 10:12:34.135718 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:34.135813 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls" condition "Ready" to 2026-07-02 10:12:34.135801432 +0000 UTC m=+324.918570398 I0702 10:12:34.242038 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:34.283629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c6lk9-m8lr9" condition "Approved" to 2026-07-02 10:12:34.283616288 +0000 UTC m=+325.066385234 I0702 10:12:34.316673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c6lk9-m8lr9" condition "Ready" to 2026-07-02 10:12:34.316663962 +0000 UTC m=+325.099432888 I0702 10:12:34.358600 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:34.358592429 +0000 UTC m=+325.141361365 I0702 10:12:34.381229 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:34.381875 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:34.381867139 +0000 UTC m=+325.164636095 I0702 10:12:34.440687 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c6lk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:47.354562 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:12:47.354589 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 10:12:47.354582777 +0000 UTC m=+338.137351713 I0702 10:12:47.354584 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 10:12:47.354563807 +0000 UTC m=+338.137332763 I0702 10:12:47.376696 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:47.376788 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 10:12:47.376776443 +0000 UTC m=+338.159545389 I0702 10:12:47.519871 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:47.554766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7w58x" condition "Approved" to 2026-07-02 10:12:47.554751802 +0000 UTC m=+338.337520758 I0702 10:12:47.589561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7w58x" condition "Ready" to 2026-07-02 10:12:47.589541483 +0000 UTC m=+338.372310459 I0702 10:12:47.626391 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:47.626379457 +0000 UTC m=+338.409148403 I0702 10:12:47.726084 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:47.728867 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:12:47.728860258 +0000 UTC m=+338.511629194 I0702 10:12:47.750504 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:12:47.754991 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:15:55.102486 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 10:15:55.102468229 +0000 UTC m=+525.885237185 I0702 10:15:55.102628 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:15:55.102650 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 10:15:55.102646113 +0000 UTC m=+525.885415049 I0702 10:15:55.118849 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:15:55.118913 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:15:55.118982 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 10:15:55.118971515 +0000 UTC m=+525.901740451 I0702 10:15:55.421572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8s6cl" condition "Approved" to 2026-07-02 10:15:55.421501888 +0000 UTC m=+526.204270834 I0702 10:15:55.444619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8s6cl" condition "Ready" to 2026-07-02 10:15:55.444606384 +0000 UTC m=+526.227375320 I0702 10:15:55.474156 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:15:55.474134586 +0000 UTC m=+526.256903532 I0702 10:15:55.502980 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:15:55.503625 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:15:55.503617246 +0000 UTC m=+526.286386182 I0702 10:15:55.523690 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:15:55.524420 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:15:55.52440919 +0000 UTC m=+526.307178156 I0702 10:16:33.388131 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 10:16:33.388116041 +0000 UTC m=+564.170885017 I0702 10:16:33.388555 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:16:33.388961 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 10:16:33.388950648 +0000 UTC m=+564.171719614 I0702 10:16:33.406645 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:16:33.406763 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 10:16:33.406806 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 10:16:33.406798899 +0000 UTC m=+564.189567845 I0702 10:16:33.595442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8cft5" condition "Approved" to 2026-07-02 10:16:33.595426752 +0000 UTC m=+564.378195698 I0702 10:16:33.619096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8cft5" condition "Ready" to 2026-07-02 10:16:33.619084137 +0000 UTC m=+564.401853093 I0702 10:16:33.658563 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:16:33.65854428 +0000 UTC m=+564.441313256 I0702 10:16:33.683703 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:16:33.684164 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:16:33.684156618 +0000 UTC m=+564.466925554 I0702 10:16:33.708322 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 10:16:33.709019 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 10:16:33.709011489 +0000 UTC m=+564.491780425 I0702 10:16:33.712517 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"