I0724 04:40:38.561022 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0724 04:40:38.561123 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0724 04:40:38.561188 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0724 04:40:38.564421 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0724 04:40:38.564758 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0724 04:40:38.564868 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0724 04:40:38.564985 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0724 04:40:38.567171 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0724 04:40:38.580706 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0724 04:40:38.590549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0724 04:40:38.590607 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0724 04:40:38.594276 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0724 04:40:38.596569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0724 04:40:38.598401 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0724 04:40:38.600002 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0724 04:40:38.601689 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0724 04:40:38.604011 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0724 04:40:38.604049 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0724 04:40:38.604363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0724 04:40:38.608763 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0724 04:40:38.613031 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0724 04:40:38.615952 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0724 04:40:38.617764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0724 04:40:38.619582 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0724 04:40:38.621403 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0724 04:40:38.623223 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0724 04:40:38.623366 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0724 04:40:38.624939 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0724 04:40:38.624953 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0724 04:40:38.625081 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0724 04:40:38.626721 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0724 04:40:38.631039 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0724 04:40:38.632831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0724 04:40:38.635121 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:38.636339 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:38.636707 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:38.637978 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:38.658589 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:38.685475 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:38.687096 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:38.699326 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:38.718313 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:38.721224 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:49.942159 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-24 04:40:49.942120285 +0000 UTC m=+11.414931768 I0724 04:40:50.633153 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-24 04:40:50.633140557 +0000 UTC m=+12.105952010 I0724 04:40:50.634231 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:40:50.634253 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 04:40:50.634247954 +0000 UTC m=+12.107059407 E0724 04:40:50.646666 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 04:40:50.646729 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-24 04:40:50.646722178 +0000 UTC m=+12.119533631 E0724 04:40:50.646750 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 04:40:50.652222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:40:50.652292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:40:50.652307 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 04:40:50.652300784 +0000 UTC m=+12.125112237 E0724 04:40:50.658892 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0724 04:40:50.658986 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 04:40:50.659026 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 04:40:50.659069 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0724 04:40:50.691339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:40:50.698178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qlrmq" condition "Approved" to 2026-07-24 04:40:50.698169576 +0000 UTC m=+12.170981029 I0724 04:40:50.712712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qlrmq" condition "Ready" to 2026-07-24 04:40:50.712700753 +0000 UTC m=+12.185512206 I0724 04:40:50.769416 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:40:50.769406704 +0000 UTC m=+12.242218147 I0724 04:40:50.786313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:40:50.786728 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:40:50.786711573 +0000 UTC m=+12.259523026 I0724 04:40:50.802467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:40:55.660235 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:40:55.660217267 +0000 UTC m=+17.133028740 I0724 04:41:18.824651 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-24 04:41:18.824628305 +0000 UTC m=+40.297439758 I0724 04:41:18.824842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:41:18.824864 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 04:41:18.824860008 +0000 UTC m=+40.297671461 I0724 04:41:18.860797 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-24 04:41:18.860784994 +0000 UTC m=+40.333596457 I0724 04:41:18.863728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:41:18.864399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:41:18.864505 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 04:41:18.864498283 +0000 UTC m=+40.337309736 I0724 04:41:19.004867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-c72w9" condition "Approved" to 2026-07-24 04:41:19.00485748 +0000 UTC m=+40.477668933 I0724 04:41:19.029544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-c72w9" condition "Ready" to 2026-07-24 04:41:19.029533952 +0000 UTC m=+40.502345395 I0724 04:41:19.056092 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:41:19.056075459 +0000 UTC m=+40.528886942 I0724 04:41:19.084546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:41:19.084828 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:41:19.084822897 +0000 UTC m=+40.557634350 I0724 04:41:19.094181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:41:19.105323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:45:15.124660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-109.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:45:15.124703 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Issuing" to 2026-07-24 04:45:15.124694274 +0000 UTC m=+276.597505727 I0724 04:45:15.124734 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-07-24 04:45:15.124715824 +0000 UTC m=+276.597527297 I0724 04:45:15.148060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:45:15.148112 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-07-24 04:45:15.148105496 +0000 UTC m=+276.620916949 I0724 04:45:15.312648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:45:15.341731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-6492t" condition "Approved" to 2026-07-24 04:45:15.34172313 +0000 UTC m=+276.814534573 I0724 04:45:15.365569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-6492t" condition "Ready" to 2026-07-24 04:45:15.365559353 +0000 UTC m=+276.838370806 I0724 04:45:15.386356 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:45:15.386345716 +0000 UTC m=+276.859157169 I0724 04:45:15.402239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:46:19.327686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:46:19.327731 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-24 04:46:19.327721062 +0000 UTC m=+340.800532535 I0724 04:46:19.327923 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-24 04:46:19.327898455 +0000 UTC m=+340.800709948 E0724 04:46:19.342677 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 04:46:19.342731 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-24 04:46:19.34272134 +0000 UTC m=+340.815532823 E0724 04:46:19.342857 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 04:46:19.343785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:46:19.343849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:46:19.343896 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-24 04:46:19.343890302 +0000 UTC m=+340.816701765 E0724 04:46:19.357755 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0724 04:46:19.357877 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 04:46:19.357908 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 04:46:19.357973 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0724 04:46:19.382453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:46:19.382697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wzl5n" condition "Approved" to 2026-07-24 04:46:19.382682933 +0000 UTC m=+340.855494416 I0724 04:46:19.394319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wzl5n" condition "Ready" to 2026-07-24 04:46:19.394306658 +0000 UTC m=+340.867118141 I0724 04:46:19.417121 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:46:19.417106871 +0000 UTC m=+340.889918354 I0724 04:46:19.437323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:46:19.437686 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:46:19.437679183 +0000 UTC m=+340.910490636 I0724 04:46:19.452979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:46:19.453185 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:46:19.453179801 +0000 UTC m=+340.925991254 I0724 04:46:24.359346 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:46:24.359326723 +0000 UTC m=+345.832138206 I0724 04:47:04.734214 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-24 04:47:04.734169799 +0000 UTC m=+386.206981272 I0724 04:47:04.736368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:47:04.736404 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-24 04:47:04.736397237 +0000 UTC m=+386.209208710 I0724 04:47:04.740411 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-24 04:47:04.740405964 +0000 UTC m=+386.213217407 I0724 04:47:04.744178 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-24 04:47:04.744159617 +0000 UTC m=+386.216971060 I0724 04:47:04.748432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:47:04.748475 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-24 04:47:04.74846741 +0000 UTC m=+386.221278853 I0724 04:47:04.748493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:47:04.748519 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-24 04:47:04.748514551 +0000 UTC m=+386.221325994 I0724 04:47:04.782093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:04.782152 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-24 04:47:04.782145457 +0000 UTC m=+386.254956920 I0724 04:47:04.786248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:04.786375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:47:04.786406 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-24 04:47:04.786399488 +0000 UTC m=+386.259210941 I0724 04:47:04.796085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:04.796165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:47:04.796191 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-24 04:47:04.796185434 +0000 UTC m=+386.268996887 I0724 04:47:05.016548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5q48q" condition "Approved" to 2026-07-24 04:47:05.016534646 +0000 UTC m=+386.489346119 I0724 04:47:05.043717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5q48q" condition "Ready" to 2026-07-24 04:47:05.043701922 +0000 UTC m=+386.516513405 I0724 04:47:05.137293 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:47:05.137279206 +0000 UTC m=+386.610090649 I0724 04:47:05.167901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:05.272241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:05.355347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hnbs5" condition "Approved" to 2026-07-24 04:47:05.355336413 +0000 UTC m=+386.828147866 I0724 04:47:05.432242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hnbs5" condition "Ready" to 2026-07-24 04:47:05.432229425 +0000 UTC m=+386.905040878 I0724 04:47:05.475360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rzdbl" condition "Approved" to 2026-07-24 04:47:05.47534323 +0000 UTC m=+386.948154663 I0724 04:47:05.488402 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:47:05.488393829 +0000 UTC m=+386.961205272 I0724 04:47:05.491030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rzdbl" condition "Ready" to 2026-07-24 04:47:05.491025504 +0000 UTC m=+386.963836947 I0724 04:47:05.638740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:05.904147 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:47:05.904133969 +0000 UTC m=+387.376945412 I0724 04:47:06.041357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:06.046574 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:47:06.046565563 +0000 UTC m=+387.519377016 I0724 04:47:06.434117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:06.483595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:06.535275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:13.408083 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r879b-tls" condition "Ready" to 2026-07-24 04:47:13.408053595 +0000 UTC m=+394.880865038 I0724 04:47:13.408252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r879b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:47:13.408289 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r879b-tls" condition "Issuing" to 2026-07-24 04:47:13.408274708 +0000 UTC m=+394.881086161 I0724 04:47:13.428554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r879b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r879b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:13.428622 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r879b-tls" condition "Ready" to 2026-07-24 04:47:13.428615295 +0000 UTC m=+394.901426748 I0724 04:47:13.887628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r879b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r879b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:14.099267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-r879b-zvnzb" condition "Approved" to 2026-07-24 04:47:14.099257245 +0000 UTC m=+395.572068698 I0724 04:47:14.120712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-r879b-zvnzb" condition "Ready" to 2026-07-24 04:47:14.120697309 +0000 UTC m=+395.593508782 I0724 04:47:14.197096 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-r879b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:47:14.197077293 +0000 UTC m=+395.669888776 I0724 04:47:14.259871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r879b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r879b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:14.260216 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-r879b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:47:14.260209696 +0000 UTC m=+395.733021159 I0724 04:47:14.306494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r879b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r879b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:14.309351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r879b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r879b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:26.210259 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-24 04:47:26.210242128 +0000 UTC m=+407.683053561 I0724 04:47:26.210547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:47:26.210556 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-24 04:47:26.210553423 +0000 UTC m=+407.683364866 I0724 04:47:26.225952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:26.226156 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-24 04:47:26.226033604 +0000 UTC m=+407.698845057 I0724 04:47:26.382697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:26.415842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lprkp" condition "Approved" to 2026-07-24 04:47:26.415829218 +0000 UTC m=+407.888640661 I0724 04:47:26.437206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lprkp" condition "Ready" to 2026-07-24 04:47:26.437195464 +0000 UTC m=+407.910006917 I0724 04:47:26.501370 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:47:26.501353644 +0000 UTC m=+407.974165097 I0724 04:47:26.521165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:50:41.385068 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-24 04:50:41.385054935 +0000 UTC m=+602.857866388 I0724 04:50:41.385549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:50:41.385568 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-24 04:50:41.385564542 +0000 UTC m=+602.858375995 I0724 04:50:41.398981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:50:41.399110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:50:41.399158 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-24 04:50:41.399149916 +0000 UTC m=+602.871961369 I0724 04:50:41.749224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:50:41.754140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mhcls" condition "Approved" to 2026-07-24 04:50:41.754123617 +0000 UTC m=+603.226935070 I0724 04:50:41.774351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mhcls" condition "Ready" to 2026-07-24 04:50:41.774341741 +0000 UTC m=+603.247153184 I0724 04:50:41.836132 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:50:41.836122016 +0000 UTC m=+603.308933459 I0724 04:50:41.870834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:50:41.877141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:50:41.877400 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:50:41.877395145 +0000 UTC m=+603.350206588 I0724 04:50:41.879174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:51:21.653184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:51:21.653247 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-24 04:51:21.653239976 +0000 UTC m=+643.126051429 I0724 04:51:21.653284 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-24 04:51:21.653263596 +0000 UTC m=+643.126075069 I0724 04:51:21.669865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:51:21.670240 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-24 04:51:21.670231522 +0000 UTC m=+643.143042975 I0724 04:51:21.934422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:51:21.964814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4hwfl" condition "Approved" to 2026-07-24 04:51:21.964801729 +0000 UTC m=+643.437613182 I0724 04:51:21.995449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4hwfl" condition "Ready" to 2026-07-24 04:51:21.995437507 +0000 UTC m=+643.468248960 I0724 04:51:22.031635 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:51:22.031623428 +0000 UTC m=+643.504434871 I0724 04:51:22.051444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"