I0716 09:45:43.440350 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0716 09:45:43.440524 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0716 09:45:43.446544 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0716 09:45:43.446577 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0716 09:45:43.446586 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0716 09:45:43.446938 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0716 09:45:43.447009 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0716 09:45:43.446998 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0716 09:45:43.450058 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0716 09:45:43.463285 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0716 09:45:43.464103 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0716 09:45:43.469092 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0716 09:45:43.475708 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0716 09:45:43.478292 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0716 09:45:43.478325 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0716 09:45:43.480818 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0716 09:45:43.483221 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0716 09:45:43.485013 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0716 09:45:43.485027 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0716 09:45:43.485033 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0716 09:45:43.485153 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0716 09:45:43.489290 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0716 09:45:43.490945 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0716 09:45:43.492905 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0716 09:45:43.495436 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0716 09:45:43.498835 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0716 09:45:43.501240 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0716 09:45:43.503596 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0716 09:45:43.506169 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0716 09:45:43.510385 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0716 09:45:43.512263 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0716 09:45:43.513852 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0716 09:45:43.513979 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0716 09:45:43.515880 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0716 09:45:43.519097 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:45:43.519291 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:45:43.519534 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:45:43.519870 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:45:43.520006 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:45:43.520169 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:45:43.520695 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:45:43.520746 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:45:43.520916 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:45:43.521422 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:45:43.521770 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0716 09:46:01.143446 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-16 09:46:01.143404037 +0000 UTC m=+17.727200902 I0716 09:46:01.836647 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:46:01.836664 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-16 09:46:01.836653004 +0000 UTC m=+18.420449839 I0716 09:46:01.836718 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-16 09:46:01.836708196 +0000 UTC m=+18.420505031 E0716 09:46:01.849930 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0716 09:46:01.850079 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-16 09:46:01.84999919 +0000 UTC m=+18.433796035 E0716 09:46:01.850226 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0716 09:46:01.851154 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:46:01.851411 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:46:01.851487 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-16 09:46:01.851480168 +0000 UTC m=+18.435277013 E0716 09:46:01.865639 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0716 09:46:01.865750 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0716 09:46:01.865781 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0716 09:46:01.865838 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0716 09:46:01.899758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-16 09:46:01.899746874 +0000 UTC m=+18.483543719 I0716 09:46:01.922154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-16 09:46:01.922140879 +0000 UTC m=+18.505937734 I0716 09:46:01.962593 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:46:01.962583709 +0000 UTC m=+18.546380544 I0716 09:46:01.994193 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:46:01.994427 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:46:01.994420841 +0000 UTC m=+18.578217666 I0716 09:46:02.006289 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:46:06.866438 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:46:06.866423532 +0000 UTC m=+23.450220357 I0716 09:46:28.262178 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-16 09:46:28.262163817 +0000 UTC m=+44.845960652 I0716 09:46:28.262389 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:46:28.262476 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-16 09:46:28.262447324 +0000 UTC m=+44.846244159 I0716 09:46:28.274290 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-16 09:46:28.274276703 +0000 UTC m=+44.858073538 I0716 09:46:28.281490 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:46:28.281684 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-16 09:46:28.281614175 +0000 UTC m=+44.865411010 I0716 09:46:28.418381 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:46:28.442924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-16 09:46:28.442912587 +0000 UTC m=+45.026709412 I0716 09:46:28.470500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-16 09:46:28.470490028 +0000 UTC m=+45.054286863 I0716 09:46:28.490643 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:46:28.490633273 +0000 UTC m=+45.074430108 I0716 09:46:28.507295 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:46:28.507769 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:46:28.507761081 +0000 UTC m=+45.091557906 I0716 09:46:28.519992 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:46:28.534199 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:50:33.820200 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-241.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:50:33.820272 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-241.nip.io-tls" condition "Issuing" to 2026-07-16 09:50:33.820247442 +0000 UTC m=+290.404044267 I0716 09:50:33.820617 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-241.nip.io-tls" condition "Ready" to 2026-07-16 09:50:33.820612249 +0000 UTC m=+290.404409074 I0716 09:50:33.830759 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-241.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-241.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:50:33.830842 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-241.nip.io-tls" condition "Ready" to 2026-07-16 09:50:33.830833185 +0000 UTC m=+290.414630030 I0716 09:50:34.011457 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-241.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-241.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:50:34.043000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-241.nip.io-tls-1" condition "Approved" to 2026-07-16 09:50:34.042984953 +0000 UTC m=+290.626781788 I0716 09:50:34.059624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-241.nip.io-tls-1" condition "Ready" to 2026-07-16 09:50:34.059616332 +0000 UTC m=+290.643413157 I0716 09:50:34.084522 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-241.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:50:34.08450885 +0000 UTC m=+290.668305685 I0716 09:50:34.099296 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-241.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-241.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:50:34.132396 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-241.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-241.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:51:38.337889 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-16 09:51:38.337863151 +0000 UTC m=+354.921659996 I0716 09:51:38.337983 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:51:38.338063 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-16 09:51:38.338053285 +0000 UTC m=+354.921850110 E0716 09:51:38.347603 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0716 09:51:38.347661 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-16 09:51:38.347654884 +0000 UTC m=+354.931451729 E0716 09:51:38.347679 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0716 09:51:38.348997 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:51:38.349077 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:51:38.349155 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-16 09:51:38.349148397 +0000 UTC m=+354.932945232 E0716 09:51:38.354942 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0716 09:51:38.355020 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0716 09:51:38.355042 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0716 09:51:38.355072 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0716 09:51:38.382393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-16 09:51:38.382382244 +0000 UTC m=+354.966179079 I0716 09:51:38.396668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-16 09:51:38.396659426 +0000 UTC m=+354.980456261 I0716 09:51:38.414293 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:51:38.414283831 +0000 UTC m=+354.998080666 I0716 09:51:38.431690 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:51:43.355867 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:51:43.355853211 +0000 UTC m=+359.939650066 I0716 09:52:23.806258 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:52:23.806309 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-16 09:52:23.806283814 +0000 UTC m=+400.390080639 I0716 09:52:23.806294 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-16 09:52:23.806264264 +0000 UTC m=+400.390061099 I0716 09:52:23.806565 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:52:23.806584 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-16 09:52:23.806580661 +0000 UTC m=+400.390377486 I0716 09:52:23.807060 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-16 09:52:23.807055201 +0000 UTC m=+400.390852036 I0716 09:52:23.807243 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:52:23.807282 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-16 09:52:23.807278376 +0000 UTC m=+400.391075201 I0716 09:52:23.807505 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-16 09:52:23.807500732 +0000 UTC m=+400.391297557 I0716 09:52:23.833259 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:23.833845 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:23.834489 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:52:23.834595 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-16 09:52:23.834548276 +0000 UTC m=+400.418345111 I0716 09:52:23.835852 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:23.841727 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:52:23.841762 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-16 09:52:23.841755642 +0000 UTC m=+400.425552457 I0716 09:52:23.842208 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:52:23.842226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-16 09:52:23.842223012 +0000 UTC m=+400.426019837 I0716 09:52:24.067774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-16 09:52:24.067760837 +0000 UTC m=+400.651557672 I0716 09:52:24.094240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-16 09:52:24.094229128 +0000 UTC m=+400.678025953 I0716 09:52:24.157457 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:52:24.157443998 +0000 UTC m=+400.741240843 I0716 09:52:24.159036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-16 09:52:24.159029995 +0000 UTC m=+400.742826830 I0716 09:52:24.193247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-16 09:52:24.193079782 +0000 UTC m=+400.776876607 I0716 09:52:24.195037 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:24.241959 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:52:24.241943679 +0000 UTC m=+400.825740504 I0716 09:52:24.277383 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:24.281196 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:24.286866 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:52:24.286858497 +0000 UTC m=+400.870655322 I0716 09:52:24.339839 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:24.546532 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:24.750730 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:24.800809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-16 09:52:24.800795795 +0000 UTC m=+401.384592630 I0716 09:52:24.899552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-16 09:52:24.899541365 +0000 UTC m=+401.483338200 I0716 09:52:25.349042 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:52:25.349023661 +0000 UTC m=+401.932820526 I0716 09:52:25.443262 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:25.444201 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:52:25.444188531 +0000 UTC m=+402.027985396 I0716 09:52:25.642223 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:32.012763 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:52:32.012801 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls" condition "Issuing" to 2026-07-16 09:52:32.012789833 +0000 UTC m=+408.596586658 I0716 09:52:32.012934 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls" condition "Ready" to 2026-07-16 09:52:32.012918576 +0000 UTC m=+408.596715411 I0716 09:52:32.024266 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:32.024382 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:52:32.024424 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls" condition "Issuing" to 2026-07-16 09:52:32.024416473 +0000 UTC m=+408.608213308 I0716 09:52:32.202543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls-1" condition "Approved" to 2026-07-16 09:52:32.202533517 +0000 UTC m=+408.786330332 I0716 09:52:32.217287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls-1" condition "Ready" to 2026-07-16 09:52:32.21727402 +0000 UTC m=+408.801070845 I0716 09:52:32.243218 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:52:32.243204533 +0000 UTC m=+408.827001378 I0716 09:52:32.257217 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:32.303245 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fqgcl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:44.481318 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-16 09:52:44.481306527 +0000 UTC m=+421.065103352 I0716 09:52:44.481537 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:52:44.481607 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-16 09:52:44.481598804 +0000 UTC m=+421.065395649 I0716 09:52:44.495530 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:44.495620 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-16 09:52:44.495611024 +0000 UTC m=+421.079407849 I0716 09:52:44.656905 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:44.689561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-16 09:52:44.689547991 +0000 UTC m=+421.273344816 I0716 09:52:44.709381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-16 09:52:44.709372457 +0000 UTC m=+421.293169272 I0716 09:52:44.754014 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:52:44.753997126 +0000 UTC m=+421.337793991 I0716 09:52:44.768639 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:44.770895 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:52:44.770576656 +0000 UTC m=+421.354373481 I0716 09:52:44.785127 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:52:44.785730 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:52:44.785721472 +0000 UTC m=+421.369518297 I0716 09:56:00.600509 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:56:00.600584 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-16 09:56:00.600563654 +0000 UTC m=+617.184360499 I0716 09:56:00.600603 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-16 09:56:00.600591894 +0000 UTC m=+617.184388749 I0716 09:56:00.610643 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:56:00.610723 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-16 09:56:00.610713582 +0000 UTC m=+617.194510427 I0716 09:56:00.709124 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:56:00.741303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-16 09:56:00.741290798 +0000 UTC m=+617.325087633 I0716 09:56:00.761748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-16 09:56:00.761736928 +0000 UTC m=+617.345533763 I0716 09:56:00.794557 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:56:00.794540481 +0000 UTC m=+617.378337326 I0716 09:56:00.807223 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:56:00.807629 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:56:00.807622774 +0000 UTC m=+617.391419599 I0716 09:56:00.823559 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:56:44.889143 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-16 09:56:44.889132193 +0000 UTC m=+661.472929018 I0716 09:56:44.889422 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:56:44.889453 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-16 09:56:44.889449731 +0000 UTC m=+661.473246556 I0716 09:56:44.900354 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:56:44.900568 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0716 09:56:44.900616 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-16 09:56:44.900609626 +0000 UTC m=+661.484406451 I0716 09:56:45.089352 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:56:45.102363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-16 09:56:45.102352862 +0000 UTC m=+661.686149697 I0716 09:56:45.118916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-16 09:56:45.118893565 +0000 UTC m=+661.702690390 I0716 09:56:45.145798 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:56:45.145786601 +0000 UTC m=+661.729583436 I0716 09:56:45.160496 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0716 09:56:45.161175 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-16 09:56:45.161166105 +0000 UTC m=+661.744962950 I0716 09:56:45.178649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"