I0728 14:06:22.918628 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0728 14:06:22.918799 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0728 14:06:22.918917 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0728 14:06:22.922450 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0728 14:06:22.922916 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0728 14:06:22.922975 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0728 14:06:22.923039 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0728 14:06:22.925479 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0728 14:06:22.948251 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0728 14:06:22.948559 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0728 14:06:22.952058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0728 14:06:22.955534 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0728 14:06:22.957796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0728 14:06:22.960475 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0728 14:06:22.963350 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0728 14:06:22.963947 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0728 14:06:22.968294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0728 14:06:22.970033 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0728 14:06:22.971734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0728 14:06:22.973443 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0728 14:06:22.973529 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0728 14:06:22.975489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0728 14:06:22.977759 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0728 14:06:22.979371 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0728 14:06:22.979567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0728 14:06:22.981178 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0728 14:06:22.988397 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0728 14:06:22.988480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0728 14:06:22.991078 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0728 14:06:22.993473 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0728 14:06:22.995911 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0728 14:06:22.998216 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0728 14:06:22.998273 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0728 14:06:23.006363 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:06:23.015333 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:06:23.015770 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:06:23.016095 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:06:23.056557 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:06:23.065367 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:06:23.065701 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:06:23.085477 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:06:23.100509 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:06:23.117898 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:06:35.303679 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-28 14:06:35.303657579 +0000 UTC m=+12.419217866 I0728 14:06:36.107853 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:06:36.107980 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-28 14:06:36.107971123 +0000 UTC m=+13.223531410 I0728 14:06:36.108405 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 14:06:36.108378889 +0000 UTC m=+13.223939176 I0728 14:06:36.123998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:06:36.124044 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 14:06:36.124039376 +0000 UTC m=+13.239599653 E0728 14:06:36.124239 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 14:06:36.124314 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-28 14:06:36.12430532 +0000 UTC m=+13.239865607 E0728 14:06:36.124407 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:06:36.135987 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0728 14:06:36.136078 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:06:36.136127 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:06:36.136165 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0728 14:06:36.139951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:06:36.162912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bmfq2" condition "Approved" to 2026-07-28 14:06:36.162903726 +0000 UTC m=+13.278464013 I0728 14:06:36.173964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bmfq2" condition "Ready" to 2026-07-28 14:06:36.173956646 +0000 UTC m=+13.289516923 I0728 14:06:36.193416 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:06:36.193409397 +0000 UTC m=+13.308969704 I0728 14:06:36.215814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:06:36.216065 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:06:36.216059254 +0000 UTC m=+13.331619541 I0728 14:06:36.219563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:06:36.229352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:06:36.229559 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:06:36.22953703 +0000 UTC m=+13.345097307 I0728 14:06:36.232030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:06:41.136409 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:06:41.136394302 +0000 UTC m=+18.251954579 I0728 14:07:02.298473 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 14:07:02.298430744 +0000 UTC m=+39.413991021 I0728 14:07:02.298518 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:07:02.298788 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-28 14:07:02.298775559 +0000 UTC m=+39.414335866 I0728 14:07:02.315647 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-28 14:07:02.315633641 +0000 UTC m=+39.431193928 I0728 14:07:02.336935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:07:02.336993 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 14:07:02.336987038 +0000 UTC m=+39.452547315 I0728 14:07:02.527346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:07:02.570831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fw4ks" condition "Approved" to 2026-07-28 14:07:02.57082049 +0000 UTC m=+39.686380787 I0728 14:07:02.599992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fw4ks" condition "Ready" to 2026-07-28 14:07:02.599970157 +0000 UTC m=+39.715530464 I0728 14:07:02.637492 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:07:02.637481433 +0000 UTC m=+39.753041720 I0728 14:07:02.661432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:07:02.661638 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:07:02.661632657 +0000 UTC m=+39.777192924 I0728 14:07:02.676228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:07:02.693602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:11:17.814138 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-07-28 14:11:17.814103941 +0000 UTC m=+294.929664228 I0728 14:11:17.814682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:11:17.814870 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-07-28 14:11:17.814862289 +0000 UTC m=+294.930422576 I0728 14:11:17.835985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:11:17.836179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:11:17.836258 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-07-28 14:11:17.83625056 +0000 UTC m=+294.951810847 I0728 14:11:18.264325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:11:18.270207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-4mfcz" condition "Approved" to 2026-07-28 14:11:18.270197959 +0000 UTC m=+295.385758246 I0728 14:11:18.306984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-4mfcz" condition "Ready" to 2026-07-28 14:11:18.306970208 +0000 UTC m=+295.422530515 I0728 14:11:18.339110 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:11:18.33910111 +0000 UTC m=+295.454661387 I0728 14:11:18.354760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:11:18.355257 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:11:18.355250058 +0000 UTC m=+295.470810345 I0728 14:11:18.372705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:12:18.139411 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 14:12:18.139383398 +0000 UTC m=+355.254943685 I0728 14:12:18.140492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:12:18.140655 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-28 14:12:18.140642662 +0000 UTC m=+355.256209399 E0728 14:12:18.151936 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 14:12:18.152199 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-28 14:12:18.152192249 +0000 UTC m=+355.267752536 E0728 14:12:18.152273 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 14:12:18.152820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:12:18.152916 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 14:12:18.152911177 +0000 UTC m=+355.268471464 E0728 14:12:18.163241 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0728 14:12:18.163594 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:12:18.163732 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:12:18.163977 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0728 14:12:18.172645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:12:18.194465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-79z7g" condition "Approved" to 2026-07-28 14:12:18.194453509 +0000 UTC m=+355.310013796 I0728 14:12:18.208803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-79z7g" condition "Ready" to 2026-07-28 14:12:18.208789568 +0000 UTC m=+355.324349885 I0728 14:12:18.232426 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:12:18.232414807 +0000 UTC m=+355.347975094 I0728 14:12:18.249099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:12:18.249435 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:12:18.249427615 +0000 UTC m=+355.364987902 I0728 14:12:18.267230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:12:23.164852 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:12:23.164828336 +0000 UTC m=+360.280388643 I0728 14:13:03.231812 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:03.231880 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-28 14:13:03.231845006 +0000 UTC m=+400.347405293 I0728 14:13:03.232180 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 14:13:03.232175005 +0000 UTC m=+400.347735282 I0728 14:13:03.262235 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-28 14:13:03.262225697 +0000 UTC m=+400.377785964 I0728 14:13:03.262531 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-28 14:13:03.262515525 +0000 UTC m=+400.378075802 I0728 14:13:03.262565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:03.262584 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 14:13:03.262580097 +0000 UTC m=+400.378140394 I0728 14:13:03.275334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:03.282491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:03.282522 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 14:13:03.282516065 +0000 UTC m=+400.398076342 I0728 14:13:03.282714 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:03.283458 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-28 14:13:03.282750151 +0000 UTC m=+400.398310428 I0728 14:13:03.294715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:03.294792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:03.294811 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 14:13:03.294806365 +0000 UTC m=+400.410366642 I0728 14:13:03.318861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:03.318982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:03.319030 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 14:13:03.319023606 +0000 UTC m=+400.434583883 I0728 14:13:03.491365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nn4cl" condition "Approved" to 2026-07-28 14:13:03.49135435 +0000 UTC m=+400.606914637 I0728 14:13:03.509838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nn4cl" condition "Ready" to 2026-07-28 14:13:03.509824912 +0000 UTC m=+400.625385199 I0728 14:13:03.514524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mljnl" condition "Approved" to 2026-07-28 14:13:03.514516314 +0000 UTC m=+400.630076601 I0728 14:13:03.539150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:03.545999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mljnl" condition "Ready" to 2026-07-28 14:13:03.545990723 +0000 UTC m=+400.661551010 I0728 14:13:03.550626 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:03.550617653 +0000 UTC m=+400.666177940 I0728 14:13:03.555282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qc7dv" condition "Approved" to 2026-07-28 14:13:03.555263674 +0000 UTC m=+400.670823961 I0728 14:13:03.580745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:03.586886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qc7dv" condition "Ready" to 2026-07-28 14:13:03.586879397 +0000 UTC m=+400.702439674 I0728 14:13:03.875262 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:03.875250023 +0000 UTC m=+400.990810310 I0728 14:13:04.168525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:04.168814 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:04.168809454 +0000 UTC m=+401.284369731 I0728 14:13:04.249274 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:04.249262399 +0000 UTC m=+401.364822676 I0728 14:13:04.523817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:04.706832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:04.783386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:05.097444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:12.780416 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5x76m-tls" condition "Ready" to 2026-07-28 14:13:12.780401568 +0000 UTC m=+409.895961845 I0728 14:13:12.780778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5x76m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:12.780801 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5x76m-tls" condition "Issuing" to 2026-07-28 14:13:12.780796688 +0000 UTC m=+409.896356975 I0728 14:13:12.800653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5x76m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5x76m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:12.800737 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5x76m-tls" condition "Ready" to 2026-07-28 14:13:12.800729768 +0000 UTC m=+409.916290055 I0728 14:13:12.967192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5x76m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5x76m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:12.997091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5x76m-k8zbn" condition "Approved" to 2026-07-28 14:13:12.997081667 +0000 UTC m=+410.112641954 I0728 14:13:13.019596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5x76m-k8zbn" condition "Ready" to 2026-07-28 14:13:13.019580533 +0000 UTC m=+410.135140820 I0728 14:13:13.052732 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5x76m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:13.052716406 +0000 UTC m=+410.168276683 I0728 14:13:13.068891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5x76m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5x76m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:13.135480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5x76m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5x76m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:26.991684 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:26.991714 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-28 14:13:26.991708725 +0000 UTC m=+424.107269002 I0728 14:13:26.991905 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 14:13:26.99188244 +0000 UTC m=+424.107442717 I0728 14:13:27.011098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:27.011166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:27.011179 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-28 14:13:27.011172534 +0000 UTC m=+424.126732821 I0728 14:13:27.317742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:27.325726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fp6wq" condition "Approved" to 2026-07-28 14:13:27.325708151 +0000 UTC m=+424.441268438 I0728 14:13:27.348492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fp6wq" condition "Ready" to 2026-07-28 14:13:27.348480806 +0000 UTC m=+424.464041093 I0728 14:13:27.370165 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:27.370155442 +0000 UTC m=+424.485715729 I0728 14:13:27.388453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:27.432631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:16:42.040399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:16:42.040466 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-28 14:16:42.040458022 +0000 UTC m=+619.156018309 I0728 14:16:42.040406 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 14:16:42.04037848 +0000 UTC m=+619.155938767 I0728 14:16:42.055444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:16:42.055503 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 14:16:42.055497271 +0000 UTC m=+619.171057538 I0728 14:16:42.152385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:16:42.188451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kqc5m" condition "Approved" to 2026-07-28 14:16:42.188437201 +0000 UTC m=+619.303997508 I0728 14:16:42.207487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kqc5m" condition "Ready" to 2026-07-28 14:16:42.207478048 +0000 UTC m=+619.323038325 I0728 14:16:42.239778 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:16:42.239766165 +0000 UTC m=+619.355326452 I0728 14:16:42.259887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:16:42.308705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:17:21.188642 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-28 14:17:21.18859351 +0000 UTC m=+658.304153797 I0728 14:17:21.189057 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:17:21.189094 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 14:17:21.189086741 +0000 UTC m=+658.304647028 I0728 14:17:21.204889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:17:21.205001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:17:21.205026 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 14:17:21.205017538 +0000 UTC m=+658.320577825 I0728 14:17:21.476729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:17:21.489821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9vxjn" condition "Approved" to 2026-07-28 14:17:21.489808191 +0000 UTC m=+658.605368498 I0728 14:17:21.509410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9vxjn" condition "Ready" to 2026-07-28 14:17:21.509399851 +0000 UTC m=+658.624960138 I0728 14:17:21.538874 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:17:21.538862393 +0000 UTC m=+658.654422680 I0728 14:17:21.563776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:17:21.619823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"