I0714 16:54:44.216277 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0714 16:54:44.216383 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0714 16:54:44.216457 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0714 16:54:44.220776 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0714 16:54:44.224135 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0714 16:54:44.224186 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0714 16:54:44.224228 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0714 16:54:44.228009 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0714 16:54:44.240643 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0714 16:54:44.245397 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0714 16:54:44.245462 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0714 16:54:44.245476 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0714 16:54:44.245489 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0714 16:54:44.248102 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0714 16:54:44.248149 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0714 16:54:44.250240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0714 16:54:44.252321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0714 16:54:44.256315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0714 16:54:44.259836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0714 16:54:44.262119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0714 16:54:44.264499 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0714 16:54:44.266732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0714 16:54:44.268563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0714 16:54:44.270314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0714 16:54:44.272794 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0714 16:54:44.273970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0714 16:54:44.276125 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0714 16:54:44.277779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0714 16:54:44.279414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0714 16:54:44.281012 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0714 16:54:44.282417 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0714 16:54:44.282559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0714 16:54:44.284472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0714 16:54:44.287724 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 16:54:44.287737 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 16:54:44.288594 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 16:54:44.309950 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 16:54:44.326563 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 16:54:44.336288 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 16:54:44.348578 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 16:54:44.367479 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 16:54:44.367795 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 16:54:44.378625 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 16:55:01.144187 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-14 16:55:01.144159175 +0000 UTC m=+16.967549563 I0714 16:55:01.805202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 16:55:01.805257 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-14 16:55:01.805243632 +0000 UTC m=+17.628633980 I0714 16:55:01.805245 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 16:55:01.805235682 +0000 UTC m=+17.628626070 E0714 16:55:01.817966 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 16:55:01.818012 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-14 16:55:01.818006321 +0000 UTC m=+17.641396659 E0714 16:55:01.818050 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 16:55:01.819717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 16:55:01.819790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 16:55:01.819810 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 16:55:01.819804788 +0000 UTC m=+17.643195136 E0714 16:55:01.828568 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0714 16:55:01.828646 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 16:55:01.828718 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 16:55:01.829105 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0714 16:55:01.856474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-m67p9" condition "Approved" to 2026-07-14 16:55:01.856465182 +0000 UTC m=+17.679855540 I0714 16:55:01.871369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-m67p9" condition "Ready" to 2026-07-14 16:55:01.871358424 +0000 UTC m=+17.694748782 I0714 16:55:01.900681 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 16:55:01.900664229 +0000 UTC m=+17.724054617 I0714 16:55:01.918074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 16:55:01.918771 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 16:55:01.918763446 +0000 UTC m=+17.742153814 I0714 16:55:01.932737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 16:55:01.933062 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 16:55:01.933054916 +0000 UTC m=+17.756445274 I0714 16:55:01.936227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 16:55:06.829875 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 16:55:06.829828663 +0000 UTC m=+22.653219051 I0714 16:55:27.909431 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 16:55:27.909394889 +0000 UTC m=+43.732785237 I0714 16:55:27.910692 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 16:55:27.910725 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 16:55:27.910717961 +0000 UTC m=+43.734108349 I0714 16:55:27.920744 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-14 16:55:27.920734865 +0000 UTC m=+43.744125223 I0714 16:55:27.942906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 16:55:27.942965 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 16:55:27.942984 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 16:55:27.94297948 +0000 UTC m=+43.766369818 I0714 16:55:28.203668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 16:55:28.211346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vhcd4" condition "Approved" to 2026-07-14 16:55:28.211330925 +0000 UTC m=+44.034721333 I0714 16:55:28.243180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vhcd4" condition "Ready" to 2026-07-14 16:55:28.243159763 +0000 UTC m=+44.066550151 I0714 16:55:28.275838 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 16:55:28.275823755 +0000 UTC m=+44.099214113 I0714 16:55:28.299565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 16:55:28.348960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 16:59:27.639906 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Ready" to 2026-07-14 16:59:27.639879013 +0000 UTC m=+283.463269371 I0714 16:59:27.639995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-66.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 16:59:27.640189 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Issuing" to 2026-07-14 16:59:27.640178141 +0000 UTC m=+283.463568519 I0714 16:59:27.657453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 16:59:27.657558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-66.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 16:59:27.657602 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Issuing" to 2026-07-14 16:59:27.657574783 +0000 UTC m=+283.480965141 I0714 16:59:27.816951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-66.nip.io-tls-9m4cx" condition "Approved" to 2026-07-14 16:59:27.81693952 +0000 UTC m=+283.640329878 I0714 16:59:27.847789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-66.nip.io-tls-9m4cx" condition "Ready" to 2026-07-14 16:59:27.847779054 +0000 UTC m=+283.671169412 I0714 16:59:27.873825 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 16:59:27.873812565 +0000 UTC m=+283.697202903 I0714 16:59:27.936456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 16:59:27.937192 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 16:59:27.937186282 +0000 UTC m=+283.760576630 I0714 16:59:27.969169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:00:36.025587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:00:36.025618 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 17:00:36.025610827 +0000 UTC m=+351.849001185 I0714 17:00:36.025949 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-14 17:00:36.025928473 +0000 UTC m=+351.849318851 E0714 17:00:36.039038 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 17:00:36.039075 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-14 17:00:36.03906851 +0000 UTC m=+351.862458868 E0714 17:00:36.039115 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 17:00:36.039305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:00:36.039377 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-14 17:00:36.039369607 +0000 UTC m=+351.862759965 E0714 17:00:36.048247 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0714 17:00:36.048432 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 17:00:36.048500 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 17:00:36.048552 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0714 17:00:36.056167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:00:36.072159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-x7qx9" condition "Approved" to 2026-07-14 17:00:36.072145426 +0000 UTC m=+351.895535794 I0714 17:00:36.085139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-x7qx9" condition "Ready" to 2026-07-14 17:00:36.085129269 +0000 UTC m=+351.908519637 I0714 17:00:36.102453 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:00:36.102442263 +0000 UTC m=+351.925832601 I0714 17:00:36.119527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:00:41.048747 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:00:41.048733813 +0000 UTC m=+356.872124201 I0714 17:01:20.985264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:01:20.985674 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-14 17:01:20.985316275 +0000 UTC m=+396.808706613 I0714 17:01:20.990376 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-14 17:01:20.990365968 +0000 UTC m=+396.813756316 I0714 17:01:20.990546 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-14 17:01:20.990530981 +0000 UTC m=+396.813921349 I0714 17:01:20.991177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:01:20.991200 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-14 17:01:20.991196034 +0000 UTC m=+396.814586392 I0714 17:01:20.996254 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 17:01:20.996245945 +0000 UTC m=+396.819636303 I0714 17:01:20.996391 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:01:20.996640 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-14 17:01:20.996632553 +0000 UTC m=+396.820022921 I0714 17:01:21.023383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:21.023446 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-14 17:01:21.023440583 +0000 UTC m=+396.846830931 I0714 17:01:21.024622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:21.026225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:21.026357 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-14 17:01:21.026340386 +0000 UTC m=+396.849730724 I0714 17:01:21.051947 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 17:01:21.051855732 +0000 UTC m=+396.875246080 I0714 17:01:21.230954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:21.231263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:21.313826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2dc66" condition "Approved" to 2026-07-14 17:01:21.313810837 +0000 UTC m=+397.137201225 I0714 17:01:21.314037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:21.315033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jws2k" condition "Approved" to 2026-07-14 17:01:21.315021259 +0000 UTC m=+397.138411607 I0714 17:01:21.371508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jws2k" condition "Ready" to 2026-07-14 17:01:21.3714879 +0000 UTC m=+397.194878248 I0714 17:01:21.372365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2dc66" condition "Ready" to 2026-07-14 17:01:21.372344406 +0000 UTC m=+397.195734794 I0714 17:01:21.437605 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:01:21.437584707 +0000 UTC m=+397.260975055 I0714 17:01:21.448887 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:01:21.448873594 +0000 UTC m=+397.272263942 I0714 17:01:21.466238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:21.467560 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:01:21.467549215 +0000 UTC m=+397.290939563 I0714 17:01:21.475037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:21.475324 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:01:21.475315996 +0000 UTC m=+397.298706344 I0714 17:01:21.657793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:21.719701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:21.871326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:22.030438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:22.278390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dc5pz" condition "Approved" to 2026-07-14 17:01:22.27837707 +0000 UTC m=+398.101767428 I0714 17:01:22.578691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dc5pz" condition "Ready" to 2026-07-14 17:01:22.57868119 +0000 UTC m=+398.402071548 E0714 17:01:22.715451 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-2x56n\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0714 17:01:22.992322 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-dc5pz" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-jn5xg" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0714 17:01:23.076736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rgzsb" condition "Approved" to 2026-07-14 17:01:23.076721318 +0000 UTC m=+398.900111706 I0714 17:01:23.428647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rgzsb" condition "Ready" to 2026-07-14 17:01:23.4286316 +0000 UTC m=+399.252021988 I0714 17:01:23.621432 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:01:23.621421572 +0000 UTC m=+399.444811930 I0714 17:01:23.719736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:34.793117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:01:34.793160 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls" condition "Issuing" to 2026-07-14 17:01:34.793144019 +0000 UTC m=+410.616534377 I0714 17:01:34.795676 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls" condition "Ready" to 2026-07-14 17:01:34.795667963 +0000 UTC m=+410.619058321 I0714 17:01:34.814800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:34.814860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:01:34.814876 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls" condition "Issuing" to 2026-07-14 17:01:34.814870762 +0000 UTC m=+410.638261120 I0714 17:01:35.247979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c5zmc-n8p7d" condition "Approved" to 2026-07-14 17:01:35.247965457 +0000 UTC m=+411.071355835 I0714 17:01:35.287790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c5zmc-n8p7d" condition "Ready" to 2026-07-14 17:01:35.287780877 +0000 UTC m=+411.111171215 I0714 17:01:35.478518 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:01:35.478507471 +0000 UTC m=+411.301897809 I0714 17:01:35.583570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:35.583917 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:01:35.583909625 +0000 UTC m=+411.407299983 I0714 17:01:35.616605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c5zmc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:50.873262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:01:50.873295 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-14 17:01:50.873286548 +0000 UTC m=+426.696676896 I0714 17:01:50.879890 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-14 17:01:50.87987792 +0000 UTC m=+426.703268278 I0714 17:01:50.893748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:50.893801 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-14 17:01:50.893795415 +0000 UTC m=+426.717185753 I0714 17:01:51.058216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:51.096113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-p4rqv" condition "Approved" to 2026-07-14 17:01:51.096101637 +0000 UTC m=+426.919491975 I0714 17:01:51.112813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-p4rqv" condition "Ready" to 2026-07-14 17:01:51.11280456 +0000 UTC m=+426.936194908 I0714 17:01:51.144316 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:01:51.144297451 +0000 UTC m=+426.967687799 I0714 17:01:51.163699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:01:51.219201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:04:55.660677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:04:55.660707 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-14 17:04:55.660703305 +0000 UTC m=+611.484093653 I0714 17:04:55.660675 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-14 17:04:55.660657914 +0000 UTC m=+611.484048262 I0714 17:04:55.686492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:04:55.686567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:04:55.686589 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-14 17:04:55.686582251 +0000 UTC m=+611.509972619 I0714 17:04:55.963607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rlw8c" condition "Approved" to 2026-07-14 17:04:55.963596577 +0000 UTC m=+611.786986925 I0714 17:04:55.981777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rlw8c" condition "Ready" to 2026-07-14 17:04:55.981767193 +0000 UTC m=+611.805157561 I0714 17:04:56.009090 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:04:56.009063777 +0000 UTC m=+611.832454155 I0714 17:04:56.030075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:04:56.085474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:05:36.980490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:05:36.980580 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-14 17:05:36.980570488 +0000 UTC m=+652.803960866 I0714 17:05:36.980776 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-14 17:05:36.98075911 +0000 UTC m=+652.804149468 I0714 17:05:36.999634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:05:36.999785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 17:05:36.999808 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-14 17:05:36.999803471 +0000 UTC m=+652.823193829 I0714 17:05:37.160197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:05:37.171823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fs7mk" condition "Approved" to 2026-07-14 17:05:37.17181341 +0000 UTC m=+652.995203768 I0714 17:05:37.195561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fs7mk" condition "Ready" to 2026-07-14 17:05:37.195552089 +0000 UTC m=+653.018942447 I0714 17:05:37.230396 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 17:05:37.230384997 +0000 UTC m=+653.053775355 I0714 17:05:37.255381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 17:05:37.316831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"