I0729 15:37:43.280472 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0729 15:37:43.280781 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0729 15:37:43.285374 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0729 15:37:43.285419 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0729 15:37:43.285433 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0729 15:37:43.285971 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0729 15:37:43.286081 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0729 15:37:43.286135 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0729 15:37:43.290640 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0729 15:37:43.304240 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0729 15:37:43.308543 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0729 15:37:43.314568 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0729 15:37:43.314607 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0729 15:37:43.314838 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0729 15:37:43.320288 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0729 15:37:43.323475 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0729 15:37:43.326404 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0729 15:37:43.331373 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0729 15:37:43.333454 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0729 15:37:43.339888 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0729 15:37:43.343090 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0729 15:37:43.345216 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0729 15:37:43.350215 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0729 15:37:43.352127 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0729 15:37:43.352324 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0729 15:37:43.354125 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0729 15:37:43.354279 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0729 15:37:43.356646 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0729 15:37:43.361123 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0729 15:37:43.366031 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0729 15:37:43.368114 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0729 15:37:43.370275 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0729 15:37:43.370341 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0729 15:37:43.370427 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0729 15:37:43.373371 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:43.374505 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:43.374755 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:43.374402 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:43.376480 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:43.393892 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:43.413113 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:43.429498 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:43.449360 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:43.470256 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:43.486846 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 15:37:57.342349 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-29 15:37:57.34231005 +0000 UTC m=+14.103212526 I0729 15:37:58.097078 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-29 15:37:58.097060169 +0000 UTC m=+14.857962645 I0729 15:37:58.097791 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:37:58.097837 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-29 15:37:58.097828391 +0000 UTC m=+14.858730857 I0729 15:37:58.109380 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:37:58.109569 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-29 15:37:58.109558994 +0000 UTC m=+14.870461470 E0729 15:37:58.114915 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0729 15:37:58.115096 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-29 15:37:58.115085696 +0000 UTC m=+14.875988142 E0729 15:37:58.115127 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 15:37:58.127627 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0729 15:37:58.128171 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0729 15:37:58.128352 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 15:37:58.128445 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 15:37:58.128669 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0729 15:37:58.163994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-29 15:37:58.163974868 +0000 UTC m=+14.924877344 I0729 15:37:58.190790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-29 15:37:58.190762244 +0000 UTC m=+14.951664690 I0729 15:37:58.220410 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:37:58.220397761 +0000 UTC m=+14.981300197 I0729 15:37:58.232411 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:37:58.232658 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:37:58.232654643 +0000 UTC m=+14.993557069 I0729 15:37:58.257039 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:38:03.128298 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:38:03.128281762 +0000 UTC m=+19.889184208 I0729 15:38:26.806456 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-29 15:38:26.806442776 +0000 UTC m=+43.567345212 I0729 15:38:26.807010 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:38:26.807108 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-29 15:38:26.807099684 +0000 UTC m=+43.568002130 I0729 15:38:26.815697 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-29 15:38:26.815687054 +0000 UTC m=+43.576589500 I0729 15:38:26.836826 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:38:26.836993 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:38:26.837106 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-29 15:38:26.837097309 +0000 UTC m=+43.597999755 I0729 15:38:27.172640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-29 15:38:27.172627462 +0000 UTC m=+43.933529908 I0729 15:38:27.202213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-29 15:38:27.20220286 +0000 UTC m=+43.963105296 I0729 15:38:27.242311 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:38:27.242301021 +0000 UTC m=+44.003203457 I0729 15:38:27.264159 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:38:27.264943 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:38:27.26493107 +0000 UTC m=+44.025833546 I0729 15:38:27.277650 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:38:27.278122 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:38:27.278114949 +0000 UTC m=+44.039017385 I0729 15:38:27.285284 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:42:48.331197 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-125.nip.io-tls" condition "Ready" to 2026-07-29 15:42:48.331181948 +0000 UTC m=+305.092084424 I0729 15:42:48.331273 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-125.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:42:48.331949 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-125.nip.io-tls" condition "Issuing" to 2026-07-29 15:42:48.331937692 +0000 UTC m=+305.092840168 I0729 15:42:48.344195 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-125.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-125.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:42:48.344305 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-125.nip.io-tls" condition "Ready" to 2026-07-29 15:42:48.344297738 +0000 UTC m=+305.105200184 I0729 15:42:48.458979 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-125.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-125.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:42:48.491674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-125.nip.io-tls-1" condition "Approved" to 2026-07-29 15:42:48.491664244 +0000 UTC m=+305.252566670 I0729 15:42:48.505770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-125.nip.io-tls-1" condition "Ready" to 2026-07-29 15:42:48.505759894 +0000 UTC m=+305.266662330 I0729 15:42:48.527582 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-125.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:42:48.527570147 +0000 UTC m=+305.288472593 I0729 15:42:48.540416 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-125.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-125.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:42:48.540937 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-125.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:42:48.540929722 +0000 UTC m=+305.301832168 I0729 15:42:48.555653 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-125.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-125.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:43:55.157880 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-29 15:43:55.157857299 +0000 UTC m=+371.918759785 I0729 15:43:55.158015 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:43:55.158413 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-29 15:43:55.158395848 +0000 UTC m=+371.919298364 E0729 15:43:55.168757 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0729 15:43:55.168858 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-29 15:43:55.168847902 +0000 UTC m=+371.929750348 E0729 15:43:55.168878 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0729 15:43:55.171485 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:43:55.171614 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:43:55.171637 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-29 15:43:55.171630069 +0000 UTC m=+371.932532545 E0729 15:43:55.180549 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0729 15:43:55.180685 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 15:43:55.180709 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 15:43:55.180756 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0729 15:43:55.203705 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:43:55.212863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-29 15:43:55.212848058 +0000 UTC m=+371.973750524 I0729 15:43:55.228303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-29 15:43:55.228289645 +0000 UTC m=+371.989192091 I0729 15:43:55.247357 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:43:55.247254051 +0000 UTC m=+372.008156497 I0729 15:43:55.264001 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:43:55.264468 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:43:55.264456669 +0000 UTC m=+372.025359105 I0729 15:43:55.275537 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:43:55.280117 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:00.181931 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:44:00.181905908 +0000 UTC m=+376.942808384 I0729 15:44:45.350182 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:44:45.350178 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-29 15:44:45.348266165 +0000 UTC m=+422.109168591 I0729 15:44:45.350228 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-29 15:44:45.350217314 +0000 UTC m=+422.111119750 I0729 15:44:45.350806 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:44:45.350828 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-29 15:44:45.350824483 +0000 UTC m=+422.111726919 I0729 15:44:45.351058 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-29 15:44:45.351054528 +0000 UTC m=+422.111956954 I0729 15:44:45.351213 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-29 15:44:45.35120952 +0000 UTC m=+422.112111956 I0729 15:44:45.351371 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:44:45.351388 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-29 15:44:45.351385413 +0000 UTC m=+422.112287849 I0729 15:44:45.390479 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:45.390578 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-29 15:44:45.390563909 +0000 UTC m=+422.151466345 I0729 15:44:45.391267 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:45.392124 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:45.395176 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:44:45.395311 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:44:45.395286 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-29 15:44:45.395212949 +0000 UTC m=+422.156115395 I0729 15:44:45.395350 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-29 15:44:45.395340011 +0000 UTC m=+422.156242467 I0729 15:44:45.608220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-29 15:44:45.60820417 +0000 UTC m=+422.369106606 I0729 15:44:45.624652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-29 15:44:45.62463659 +0000 UTC m=+422.385539036 I0729 15:44:45.664865 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:44:45.664853452 +0000 UTC m=+422.425755918 I0729 15:44:45.703861 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:45.704118 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:45.720723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-29 15:44:45.720705121 +0000 UTC m=+422.481607557 I0729 15:44:45.738220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-29 15:44:45.738198698 +0000 UTC m=+422.499101144 I0729 15:44:45.743825 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:45.787008 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:44:45.78698773 +0000 UTC m=+422.547890176 I0729 15:44:45.900628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-29 15:44:45.900610559 +0000 UTC m=+422.661512995 I0729 15:44:45.989450 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:46.066300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-29 15:44:46.066274868 +0000 UTC m=+422.827177314 I0729 15:44:46.637563 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:44:46.637551496 +0000 UTC m=+423.398453942 I0729 15:44:46.840125 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:46.840899 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:44:46.840888014 +0000 UTC m=+423.601790450 I0729 15:44:47.133216 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:47.182721 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:47.233207 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:54.791484 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls" condition "Ready" to 2026-07-29 15:44:54.791464734 +0000 UTC m=+431.552367200 I0729 15:44:54.792007 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:44:54.792072 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls" condition "Issuing" to 2026-07-29 15:44:54.792065583 +0000 UTC m=+431.552968039 I0729 15:44:54.804104 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:44:54.804280 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:44:54.804374 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls" condition "Issuing" to 2026-07-29 15:44:54.804364068 +0000 UTC m=+431.565266534 I0729 15:44:55.261092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls-1" condition "Approved" to 2026-07-29 15:44:55.261075255 +0000 UTC m=+432.021977701 I0729 15:44:55.354797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls-1" condition "Ready" to 2026-07-29 15:44:55.354785849 +0000 UTC m=+432.115688285 I0729 15:44:55.377383 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:44:55.377356917 +0000 UTC m=+432.138259393 I0729 15:44:55.392041 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xm7sw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:45:08.911807 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:45:08.911853 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-29 15:45:08.911840754 +0000 UTC m=+445.672743190 I0729 15:45:08.911892 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-29 15:45:08.911861845 +0000 UTC m=+445.672764291 I0729 15:45:08.926966 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:45:08.927047 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:45:08.927071 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-29 15:45:08.927060188 +0000 UTC m=+445.687962634 I0729 15:45:09.210026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-29 15:45:09.210008675 +0000 UTC m=+445.970911151 I0729 15:45:09.228386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-29 15:45:09.228370755 +0000 UTC m=+445.989273191 I0729 15:45:09.255326 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:45:09.255307031 +0000 UTC m=+446.016209487 I0729 15:45:09.268261 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:45:09.268789 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:45:09.268780828 +0000 UTC m=+446.029683274 I0729 15:45:09.286831 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:45:09.286832 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:48:27.263791 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-29 15:48:27.263767081 +0000 UTC m=+644.024669527 I0729 15:48:27.264081 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:48:27.264156 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-29 15:48:27.264144635 +0000 UTC m=+644.025047111 I0729 15:48:27.279695 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:48:27.279788 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-29 15:48:27.279779194 +0000 UTC m=+644.040681620 I0729 15:48:27.423012 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:48:27.458854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-29 15:48:27.458842813 +0000 UTC m=+644.219745249 I0729 15:48:27.485458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-29 15:48:27.485437839 +0000 UTC m=+644.246340285 I0729 15:48:27.510546 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:48:27.510531597 +0000 UTC m=+644.271434043 I0729 15:48:27.524936 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:48:27.527278 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:48:27.527264259 +0000 UTC m=+644.288166705 I0729 15:48:27.539761 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:48:27.551507 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:49:15.457806 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-29 15:49:15.457788281 +0000 UTC m=+692.218690757 I0729 15:49:15.458313 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:49:15.458364 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-29 15:49:15.458357807 +0000 UTC m=+692.219260283 I0729 15:49:15.471421 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:49:15.471489 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 15:49:15.471505 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-29 15:49:15.47149941 +0000 UTC m=+692.232401856 I0729 15:49:15.628847 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:49:15.643987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-29 15:49:15.64397243 +0000 UTC m=+692.404874866 I0729 15:49:15.657828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-29 15:49:15.657816412 +0000 UTC m=+692.418718858 I0729 15:49:15.680067 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 15:49:15.680055481 +0000 UTC m=+692.440957917 I0729 15:49:15.695261 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 15:49:15.723022 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"