I0714 17:24:59.593925 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0714 17:24:59.594077 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0714 17:24:59.597414 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0714 17:24:59.597486 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0714 17:24:59.597512 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0714 17:24:59.597867 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0714 17:24:59.597942 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0714 17:24:59.598044 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0714 17:24:59.600864 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0714 17:24:59.615491 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0714 17:24:59.620353 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0714 17:24:59.622312 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0714 17:24:59.625066 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0714 17:24:59.625087 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0714 17:24:59.625181 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0714 17:24:59.630360 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0714 17:24:59.634176 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0714 17:24:59.637121 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0714 17:24:59.639778 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0714 17:24:59.641878 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0714 17:24:59.646592 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0714 17:24:59.646891 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0714 17:24:59.650405 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0714 17:24:59.653476 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0714 17:24:59.657079 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0714 17:24:59.659066 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0714 17:24:59.660936 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0714 17:24:59.662731 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0714 17:24:59.668499 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0714 17:24:59.668534 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0714 17:24:59.668549 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0714 17:24:59.668727 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0714 17:24:59.671714 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0714 17:24:59.674060 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0714 17:24:59.677240 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:24:59.677366 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:24:59.677577 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:24:59.677720 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:24:59.678071 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:24:59.678244 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:24:59.692250 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:24:59.728928 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:24:59.748899 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:24:59.766650 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:24:59.783323 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0714 17:25:11.285303 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-14 17:25:11.285265945 +0000 UTC m=+11.716891895 I0714 17:25:11.995612 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:25:11.995665 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 17:25:11.995657111 +0000 UTC m=+12.427283051 I0714 17:25:11.995674 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-14 17:25:11.995663541 +0000 UTC m=+12.427289491 I0714 17:25:12.019884 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0714 17:25:12.020011 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 17:25:12.020137 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-14 17:25:12.020125229 +0000 UTC m=+12.451751209 E0714 17:25:12.020182 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 17:25:12.020268 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:25:12.020350 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 17:25:12.020339146 +0000 UTC m=+12.451965116 E0714 17:25:12.037366 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0714 17:25:12.037464 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 17:25:12.037498 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 17:25:12.037533 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0714 17:25:12.076518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-14 17:25:12.076502421 +0000 UTC m=+12.508128391 I0714 17:25:12.095365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-14 17:25:12.095350467 +0000 UTC m=+12.526976417 I0714 17:25:12.157444 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:25:12.157427912 +0000 UTC m=+12.589053852 I0714 17:25:12.180284 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:25:17.038803 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:25:17.038793412 +0000 UTC m=+17.470419362 I0714 17:25:38.195890 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 17:25:38.195859096 +0000 UTC m=+38.627485036 I0714 17:25:38.196291 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:25:38.196343 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 17:25:38.196337549 +0000 UTC m=+38.627963479 I0714 17:25:38.206374 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-14 17:25:38.206363677 +0000 UTC m=+38.637989617 I0714 17:25:38.208772 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:25:38.208863 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 17:25:38.208856222 +0000 UTC m=+38.640482152 I0714 17:25:38.450614 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:25:38.489229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-14 17:25:38.489217997 +0000 UTC m=+38.920843927 I0714 17:25:38.516948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-14 17:25:38.516936742 +0000 UTC m=+38.948562682 I0714 17:25:38.546911 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:25:38.546885375 +0000 UTC m=+38.978511315 I0714 17:25:38.569562 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:25:38.571018 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:25:38.571010218 +0000 UTC m=+39.002636158 I0714 17:25:38.584312 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:25:38.584799 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:25:38.584790573 +0000 UTC m=+39.016416513 I0714 17:25:38.586564 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:29:58.052088 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Ready" to 2026-07-14 17:29:58.052067896 +0000 UTC m=+298.483693826 I0714 17:29:58.052562 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:29:58.052629 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Issuing" to 2026-07-14 17:29:58.052623202 +0000 UTC m=+298.484249142 I0714 17:29:58.062809 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:29:58.062875 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:29:58.062894 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Issuing" to 2026-07-14 17:29:58.062886764 +0000 UTC m=+298.494512704 I0714 17:29:58.328726 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:29:58.340294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-44.nip.io-tls-1" condition "Approved" to 2026-07-14 17:29:58.340278398 +0000 UTC m=+298.771904418 I0714 17:29:58.354997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-44.nip.io-tls-1" condition "Ready" to 2026-07-14 17:29:58.354987431 +0000 UTC m=+298.786613371 I0714 17:29:58.376164 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:29:58.376148914 +0000 UTC m=+298.807774874 I0714 17:29:58.387858 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:29:58.389320 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:29:58.389312011 +0000 UTC m=+298.820937951 I0714 17:29:58.402627 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:07.198829 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-14 17:31:07.198803837 +0000 UTC m=+367.630429777 I0714 17:31:07.199193 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:31:07.199248 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 17:31:07.199243907 +0000 UTC m=+367.630869847 I0714 17:31:07.209234 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:07.209291 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:31:07.209309 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 17:31:07.209303287 +0000 UTC m=+367.640929217 E0714 17:31:07.211457 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 17:31:07.211536 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-14 17:31:07.21152434 +0000 UTC m=+367.643150280 E0714 17:31:07.211578 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 17:31:07.220554 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0714 17:31:07.220735 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 17:31:07.220770 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 17:31:07.220799 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0714 17:31:07.251372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-14 17:31:07.251355713 +0000 UTC m=+367.682981653 I0714 17:31:07.264432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-14 17:31:07.264422066 +0000 UTC m=+367.696048016 I0714 17:31:07.286337 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:31:07.286313319 +0000 UTC m=+367.717939249 I0714 17:31:07.299589 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:07.300012 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:31:07.300003156 +0000 UTC m=+367.731629086 I0714 17:31:07.314156 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:12.220961 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:31:12.220945543 +0000 UTC m=+372.652571483 I0714 17:31:53.186594 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:31:53.188579 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-14 17:31:53.186686666 +0000 UTC m=+413.618312606 I0714 17:31:53.188971 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 17:31:53.188965315 +0000 UTC m=+413.620591255 I0714 17:31:53.189624 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:31:53.189651 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-14 17:31:53.18964499 +0000 UTC m=+413.621270920 I0714 17:31:53.189942 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-14 17:31:53.189937926 +0000 UTC m=+413.621563856 I0714 17:31:53.196405 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:31:53.196426 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-14 17:31:53.196422696 +0000 UTC m=+413.628048616 I0714 17:31:53.196765 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-14 17:31:53.196761383 +0000 UTC m=+413.628387313 I0714 17:31:53.217532 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:53.217771 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-14 17:31:53.217762897 +0000 UTC m=+413.649388827 I0714 17:31:53.231794 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:53.231854 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:31:53.231891 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-14 17:31:53.231870541 +0000 UTC m=+413.663496481 I0714 17:31:53.237354 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:53.237399 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:31:53.237415 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-14 17:31:53.237410511 +0000 UTC m=+413.669036451 I0714 17:31:53.362452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-14 17:31:53.362439521 +0000 UTC m=+413.794065451 I0714 17:31:53.375670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-14 17:31:53.375659696 +0000 UTC m=+413.807285616 I0714 17:31:53.393674 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:31:53.393665294 +0000 UTC m=+413.825291234 I0714 17:31:53.409696 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:53.410282 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:31:53.410273493 +0000 UTC m=+413.841899423 I0714 17:31:53.410985 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:53.420392 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:53.431475 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:53.457694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-14 17:31:53.457683057 +0000 UTC m=+413.889309027 I0714 17:31:53.469230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-14 17:31:53.469218485 +0000 UTC m=+413.900844415 I0714 17:31:53.571254 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:31:53.571241648 +0000 UTC m=+414.002867798 I0714 17:31:53.619962 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:53.620476 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:31:53.620468801 +0000 UTC m=+414.052094741 I0714 17:31:53.870573 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:54.069576 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:54.124992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-14 17:31:54.124976597 +0000 UTC m=+414.556602537 I0714 17:31:54.229023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-14 17:31:54.228994668 +0000 UTC m=+414.660620638 I0714 17:31:54.676236 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:31:54.676216744 +0000 UTC m=+415.107842714 I0714 17:31:54.768994 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:31:54.769891 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:31:54.769877732 +0000 UTC m=+415.201503702 I0714 17:31:54.969261 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:32:02.009624 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:32:02.009655 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" condition "Ready" to 2026-07-14 17:32:02.009634743 +0000 UTC m=+422.441260703 I0714 17:32:02.009677 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" condition "Issuing" to 2026-07-14 17:32:02.009662893 +0000 UTC m=+422.441288853 I0714 17:32:02.017602 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vgx67-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:32:02.017685 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" condition "Ready" to 2026-07-14 17:32:02.017675783 +0000 UTC m=+422.449301713 I0714 17:32:02.243432 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vgx67-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:32:02.276705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vgx67-tls-1" condition "Approved" to 2026-07-14 17:32:02.276691851 +0000 UTC m=+422.708317791 I0714 17:32:02.295037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vgx67-tls-1" condition "Ready" to 2026-07-14 17:32:02.29502852 +0000 UTC m=+422.726654460 I0714 17:32:02.318799 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:32:02.318789115 +0000 UTC m=+422.750415045 I0714 17:32:02.331142 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vgx67-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:32:02.333660 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:32:02.33365371 +0000 UTC m=+422.765279640 I0714 17:32:02.345007 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vgx67-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:32:02.345623 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vgx67-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:32:02.345614324 +0000 UTC m=+422.777240274 I0714 17:32:15.174728 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-14 17:32:15.174715521 +0000 UTC m=+435.606341451 I0714 17:32:15.174822 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:32:15.174860 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-14 17:32:15.174853464 +0000 UTC m=+435.606479394 I0714 17:32:15.199114 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:32:15.199206 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:32:15.199260 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-14 17:32:15.1992536 +0000 UTC m=+435.630879530 I0714 17:32:15.375111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-14 17:32:15.375099937 +0000 UTC m=+435.806725877 I0714 17:32:15.395395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-14 17:32:15.395381107 +0000 UTC m=+435.827007057 I0714 17:32:15.423839 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:32:15.423821887 +0000 UTC m=+435.855447827 I0714 17:32:15.435758 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:32:15.436281 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:32:15.436275385 +0000 UTC m=+435.867901315 I0714 17:32:15.449404 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:35:41.880796 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:35:41.880847 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-14 17:35:41.880835906 +0000 UTC m=+642.312461866 I0714 17:35:41.880907 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-14 17:35:41.880878047 +0000 UTC m=+642.312503987 I0714 17:35:41.893925 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:35:41.894158 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-14 17:35:41.894146334 +0000 UTC m=+642.325772314 I0714 17:35:41.961584 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:35:42.002519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-14 17:35:42.00250432 +0000 UTC m=+642.434130280 I0714 17:35:42.024284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-14 17:35:42.024273333 +0000 UTC m=+642.455899273 I0714 17:35:42.045082 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:35:42.045071419 +0000 UTC m=+642.476697359 I0714 17:35:42.059913 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:36:27.295807 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:36:27.303065 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-14 17:36:27.303055202 +0000 UTC m=+687.734681132 I0714 17:36:27.303121 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-14 17:36:27.303117633 +0000 UTC m=+687.734743573 I0714 17:36:27.351155 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:36:27.351430 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:36:27.351535 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-14 17:36:27.351516819 +0000 UTC m=+687.783142739 I0714 17:36:27.572336 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:36:27.583524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-14 17:36:27.58351237 +0000 UTC m=+688.015138290 I0714 17:36:27.595760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-14 17:36:27.595748227 +0000 UTC m=+688.027374167 I0714 17:36:27.620159 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:36:27.620146188 +0000 UTC m=+688.051772138 I0714 17:36:27.637822 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:36:27.638962 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:36:27.638938915 +0000 UTC m=+688.070564875 I0714 17:36:27.646022 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:36:27.668567 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"